Read the docs

silentmatt

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

silentmatt records in CISA KEV

No silentmatt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Javascript Expression Evaluator 2 records HIGH

Records

2 records in Javascript Expression Evaluator · all components

TI-2025-12072 CVE-2025-13204 · GHSA-8gw3-rxh4-v6jx

Prototype pollution in silentmatt expr-eval

Priority HIGH 82

npm package `expr-eval` is vulnerable to Prototype Pollution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00851 Published 2025-11-14 Partial fix · 2.0.2 CWE-1321
TI-2025-11671 CVE-2025-12735 · GHSA-jc85-fpwf-qm7x

Code injection in silentmatt expr-eval

Priority HIGH 82

The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01761 Published 2025-11-05 Fixed in 3.0.1 CWE-94
Open these records in search →