Expr-eval-fork vulnerabilities
We track 1 vulnerability in Expr-eval-fork products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Expr-eval-fork vulnerabilities
- 9.8 Critical severity
expr-eval: Improper Control of Generation of Code
The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER o