CVE-2025-12735

The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER of the context object into the evaluate() function and trigger arbitrary code execution.

• CWE-94

• https://github.com/advisories/GHSA-jc85-fpwf-qm7xThird Party Advisory
• https://github.com/jorenbroekema/expr-evalProduct
• https://github.com/silentmatt/expr-evalProduct
• https://github.com/silentmatt/expr-eval/pull/288Issue Tracking, Patch
• https://kb.cert.org/vuls/id/263614Third Party Advisory
• https://www.npmjs.com/package/expr-evalProduct
• https://www.npmjs.com/package/expr-eval-forkProduct
• https://www.kb.cert.org/vuls/id/263614Third Party Advisory
• https://github.com/jorenbroekema/expr-eval/blob/460b820ba01c5aca6c5d84a7d4f1fa5d1913c67b/test/security.jsProduct

Published

Nov 5, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-12729Inappropriate implementation in Omnibox in Google Chrome on …4.2
• CVE-2025-1273A maliciously crafted PDF file, when linked or imported into…7.8
• CVE-2025-12731Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-12732The WP Import – Ultimate CSV XML Importer for WordPress plug…4.3
• CVE-2025-12733The Import any XML, CSV or Excel File to WordPress (WP All I…8.8
• CVE-2025-12734GitLab has remediated an issue in GitLab CE/EE affecting all…3.5
• CVE-2025-12736in OpenHarmony v5.0.3 and prior versions allow a local attac…6.5
• CVE-2025-12738Neo4j Enterprise edition versions prior to 2025.11.2 and 5.2…1.3
• CVE-2025-12739An attacker with viewer permissions in Looker could craft a …7.3
• CVE-2025-1274A maliciously crafted RCS file, when parsed through Autodesk…7.8
• CVE-2025-12740A Looker user with a Developer role could create a database …7.7
• CVE-2025-12741A Looker user with Developer role could create a database co…7.7