CVE-2025-13204

The npm package expr-eval is vulnerable to Prototype Pollution due to prototype contamination in the express eval interface. An attacker exploiting this vulnerability can leverage the JavaScript prototype-based inheritance model to achieve arbitrary code execution . This issue has been observed i...