cve-2025-12735-expr-eval-rce

CVE-2025-12735 expr-eval RCE Exploit A security research tool for detecting and testing the CVE-2025-12735 vulnerability in the expr-eval and expr-eval-fork npm packages. ⚠️ Disclaimer This tool is for authorized security testing and educational purposes only. Unauthorized access to computer...

cve-2025-12735-expr-eval-rce

CVE-2025-12735 expr-eval RCE Exploit A security research tool for detecting and testing the CVE-2025-12735 vulnerability in the expr-eval and expr-eval-fork npm packages. ⚠️ Disclaimer This tool is for authorized security testing and educational purposes only. Unauthorized access to computer...

Linux Distros Unpatched Vulnerability : CVE-2025-13204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance mod...

CVE-2025-13204

npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue. Mitigation Mitigation for this issue is eithe...

expr-eval vulnerable to Prototype Pollution

npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...

CVE-2025-13204 CVE-2025-13204

npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...

@aleph-alpha/config-css (>=0.7.0, <=0.18.102), @altimetrikmorphds/morphstencil (>=1.0.0, <=2.0.150) +54 more potentially affected by CVE-2025-13204 via expr-eval-fork (2.0.2)

expr-eval-fork NPM version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on expr-eval-fork and may be impacted: - @aleph-alpha/config-css =0.7.0, =1.0.0, =1.0.0, =1.0.0, =0.1.20, =0.0.0-feat-data-color-scheme-types-20250718110202, =6.6.1-nelp.1,...

CVE-2025-13204 CVE-2025-13204

npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...

CVE-2025-13204 CVE-2025-13204

npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...

@aleph-alpha/config-css (>=0.7.0, <=0.18.102), @altimetrikmorphds/morphstencil (>=1.0.0, <=2.0.150) +54 more potentially affected by CVE-2025-12735 via expr-eval-fork (2.0.2)

expr-eval-fork NPM version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on expr-eval-fork and may be impacted: - @aleph-alpha/config-css =0.7.0, =1.0.0, =1.0.0, =1.0.0, =0.1.20, =0.0.0-feat-data-color-scheme-types-20250718110202, =6.6.1-nelp.1,...