CVE-2025-21042 has been added to the US cyber agency’s Known Exploited Vulnerabilities Catalog days after researchers outlined the LANDFALL spyware campaign.
A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be ...