Filtered by vendor Silentmatt Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-13204 2 Expr-eval Project, Silentmatt 2 Expr-eval, Javascript Expression Evaluator 2026-01-08 7.3 High
npm package `expr-eval` is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue.