283 matches found
cve-2025-12735-expr-eval-rce
CVE-2025-12735 expr-eval RCE Exploit A security research tool for detecting and testing the CVE-2025-12735 vulnerability in the expr-eval and expr-eval-fork npm packages. ⚠️ Disclaimer This tool is for authorized security testing and educational purposes only. Unauthorized access to computer...
cve-2025-12735-expr-eval-rce
CVE-2025-12735 expr-eval RCE Exploit A security research tool for detecting and testing the CVE-2025-12735 vulnerability in the expr-eval and expr-eval-fork npm packages. ⚠️ Disclaimer This tool is for authorized security testing and educational purposes only. Unauthorized access to computer...
safe-expr-eval
safe-expr-eval Fast and lightweight expression evaluator for JavaScript and TypeScript. A modern expression parser with a familiar API, zero dependencies, and full TypeScript support. Features Fast expression parsing and evaluation Lightweight and dependency-free Full TypeScript support Simple an...
PT-2026-133460
SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE LIMIT EXPR DEPTH limit by chaining COLLATE postfix operators. Attackers can supply roughly 175,000 chained COLLATE operators in SQL or an untrusted database view to trigger unbounded recursio...
CLEANSTART-2026-UK84272 Expr is an expression language and expression evaluation for Go
Security vulnerability affects the argo-cd package. Expr is an expression language and expression evaluation for Go...
PT-2026-135193
Security vulnerability affects the argo-cd package. Expr is an expression language and expression evaluation for Go...
CLSA-2024-1719932549 kernel: Fix of 20 CVEs
net: iptunnel: make sure to pull inner header in iptunnelrcv CVE-2024-26882 - net: Set true network header for ECN decapsulation CVE-2024-26882 - media: dvb-core: Fix use-after-free due to race at dvbregisterdevice CVE-2022-45884 - media: dvbdev: fix error logic at dvbregisterdevice...
CLSA-2026-1792241023 TuxCare security update for expr-eval (1 CVE)
TuxCare rebuilt expr-eval to address 1 CVE. Fixed in 2.0.2-tuxcare.4...
PT-2026-126749
TuxCare rebuilt expr-eval to address 1 CVE. Fixed in 2.0.2-tuxcare.4...
hobbes:fuzz-typecheck-expr: Crash in hobbes::castexp::apply
Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=4848400353525760 Project: hobbes Fuzzing Engine: afl Fuzz Target: fuzz-typecheck-expr Job Type: aflasanhobbes Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x784005ac7000 Crash...
ROOT-APP-NPM-CVE-2026-12866 CVE-2026-12866 in expr-eval - Patched by Root
Root has patched CVE-2026-12866 in the expr-eval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-12735 CVE-2025-12735 in expr-eval - Patched by Root
Root has patched CVE-2025-12735 in the expr-eval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-13204 CVE-2025-13204 in expr-eval - Patched by Root
Root has patched CVE-2025-13204 in the expr-eval package for Root:npm. Multiple fixed versions available...
Rocky Linux 9 [CIQ] Security Update: opentelemetry-collector (crlsa-2025_23729)
The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202523729 advisory. github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation CVE-2025-68156 Tenable has extracted the preceding descripti...
Rocky Linux 10.0 [CIQ] Security Update: opentelemetry-collector Multiple Vulnerabilities (crlsa-2025_7479)
The Rocky Linux 10.0 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257479 advisory. go-jose: Go JOSE's Parsing Vulnerable to Denial of Service CVE-2025-27144 golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...
PT-2026-97863
Name of the Vulnerable Software and Affected Versions tinyexpr version 4a7456e Description An incorrect buffer size calculation occurs in the new expr function. For arity-0 expression nodes, such as constants, variables, and zero-argument functions, the function allocates less memory than the siz...
hobbes:fuzz-parse-expr: Stack-buffer-overflow in hobbes::diffRegex
Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=4831270021693440 Project: hobbes Fuzzing Engine: honggfuzz Fuzz Target: fuzz-parse-expr Job Type: honggfuzzasanhobbes Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...
Malicious code in @zalastax/nolb-expr- (npm)
The package @zalastax/nolb-expr- was found to contain malicious code. --- Credit: OpenSSF source...
