CVE-2025-12735
CVE-2025-12735
HIGH 8.6EPSS 1.8%
The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER of the context object into the evaluate() function and trigger arbitrary code execution.
- Affected
- silentmatt · expr-eval-fork · expr-eval
- CVSS v4.0 GitHub
- 8.6 HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS v3.1 CNA
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 1.76% chance of exploitation in the next 30 days, 78th percentile
- Published
- 2025-11-05
- Updated
- 2025-11-22
Proof-of-concept exploits (2)
- AN5I/cve-2025-12735-expr-eval-rce0★ · 2025-11-21
- alnashawatirohwederb2167-max/cve-2025-12735-expr-eval-rce0★ · 2025-11-20
Security advisories
- advisories/GHSA-jc85-fpwf-qm7x
- https://kb.cert.org/vuls/id/263614
- https://www.kb.cert.org/vuls/id/263614
- silentmatt/expr-eval/pull/288
- jorenbroekema/expr-eval
- https://www.npmjs.com/package/expr-eval
- https://www.npmjs.com/package/expr-eval-fork