Read the docs
Red Hat Security Advisory

RHSA-2026:0140

grafana-pcp security update

Released 2026-01-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

TI-2025-12072 CVE-2025-13204 · GHSA-8gw3-rxh4-v6jx

Prototype pollution in silentmatt expr-eval

Priority HIGH 82

npm package `expr-eval` is vulnerable to Prototype Pollution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00851 Published 2025-11-14 Partial fix · 2.0.2 CWE-1321