expr-eval

v2.0.2npm· JavaScript

Mathematical expression evaluator

The verdict

Has 2 high-severity advisories. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityRising

Security2 advisories

LicensePermissive

DepsZero deps

Maintenance

Last published 6 years ago.

Popularity

469K downloads / week

Security

2 known advisories (worst: high severity).

License

MIT

Dependencies

No runtime dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
expr-eval vulnerable to Prototype Pollution
GHSA-8gw3-rxh4-v6jx Published 2025-11-14
HIGH
expr-eval does not restrict functions passed to the evaluate function
GHSA-jc85-fpwf-qm7x Published 2025-11-05

Recent releases