Bleepingcomputer Critical Vulnerability Discovered in expr-eval JavaScript Library
Article Content
Browse articles 
A critical vulnerability has been identified in the expr-eval JavaScript library, which is widely used for evaluating mathematical expressions in various applications. Discovered by security researcher Jangwoo Choe, this vulnerability (CVE-2025-12735) allows for remote code execution through maliciously crafted input, with a severity rating of 9.8 from CISA. The library has over 800,000 weekly downloads on NPM, making it a significant risk for many developers and applications.
Ask AI about this cluster
Answers cite the sources they use
Updated 212d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track CVE-2025-12735 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical CVE-2026-59971: Unauthenticated SQL Execution in MySQL MCP Server A critical vulnerability, CVE-2026-59971, has been identified in the MySQL MCP Server affecting versions prior to 0.4.2. The flaw allows unauthenticated SQL execution due to missing Origin/Host validation in SSE transport. Attackers can exploit this vulnerability via DNS rebinding or direct exposure, potentially…