Silentmatt vulnerabilities
We track 2 vulnerabilities in Silentmatt products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 14, 2025.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Silentmatt vulnerabilities
- 9.8 Critical severity
expr-eval: Improperly Controlled Modification of Object Prototype Attributes
npm package `expr-eval` is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue.
- 9.8 Critical severity
expr-eval: Improper Control of Generation of Code
The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER o