This fork addresses silentmatt#266, security fix has been committed but was never released to NPM Therefore, we publish expr-eval-fork to NPM to work around this issue. If expr-eval ever gets released ...
This library is a modified version of Raphael Graf’s ActionScript Expression Parser. When I wrote the JavaScript Function Plotter, I wanted a better alternative to using JavaScript’s eval function.
A critical security vulnerability in the popular JavaScript library expr-eval allows remote code execution. The bug, with a CVSS score of 9.8, affects hundreds of projects and is forcing developers to ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results