Ó╣ÇÓ©äÓ©úÓ©ÀÓ╣êÓ©¡Ó©çÓ©íÓ©ÀÓ©¡Ó©üÓ©▓Ó©úÓ©ØÓ©ÂÓ©üÓ©¡Ó©ÜÓ©úÓ©íÓ©öÓ╣ëÓ©▓Ó©ÖÓ©äÓ©ºÓ©▓Ó©íÓ©øÓ©ÑÓ©¡Ó©öÓ©áÓ©▒Ó©óÓ©ùÓ©▓Ó©çÓ©äÓ©¡Ó©íÓ©×Ó©┤Ó©ºÓ╣ÇÓ©òÓ©¡Ó©úÓ╣î

Ó©¬Ó©úÓ©©Ó©ø

CVE-2026-12866 Ó╣ÇÓ©øÓ╣çÓ©ÖÓ©äÓ©ºÓ©▓Ó©íÓ╣ÇÓ©¬Ó©ÁÓ╣êÓ©óÓ©çÓ©ùÓ©ÁÓ╣êÓ╣ÇÓ©üÓ©┤Ó©öÓ©éÓ©ÂÓ╣ëÓ©ÖÓ╣âÓ©ÖÓ╣üÓ©×Ó╣çÓ©äÓ╣ÇÓ©üÓ©ê expr-eval Ó╣éÓ©öÓ©óÓ©íÓ©ÁÓ©äÓ©ºÓ©▓Ó©íÓ©¬Ó©│Ó©äÓ©▒Ó©ìÓ╣ÇÓ©øÓ╣çÓ©Ö 9.8/CRITICAL Ó©ïÓ©ÂÓ╣êÓ©çÓ©½Ó©íÓ©▓Ó©óÓ©ûÓ©ÂÓ©çÓ©äÓ©ºÓ©▓Ó©íÓ╣ÇÓ©¬Ó©ÁÓ╣êÓ©óÓ©çÓ©úÓ©░Ó©öÓ©▒Ó©ÜÓ©¬Ó©╣Ó©çÓ©ùÓ©ÁÓ╣êÓ©¬Ó©▓Ó©íÓ©▓Ó©úÓ©ûÓ©ùÓ©│Ó╣âÓ©½Ó╣ëÓ©£Ó©╣Ó╣ëÓ╣âÓ©èÓ╣ëÓ©¬Ó©▓Ó©íÓ©▓Ó©úÓ©ûÓ©äÓ©ºÓ©ÜÓ©äÓ©©Ó©íÓ╣üÓ©ÑÓ©░Ó©¬Ó©úÓ╣ëÓ©▓Ó©çÓ╣éÓ©äÓ╣ëÓ©öÓ╣äÓ©öÓ╣ë

Ó©ºÓ©▒Ó©òÓ©ûÓ©©Ó©øÓ©úÓ©░Ó©¬Ó©çÓ©äÓ╣îÓ©éÓ©¡Ó©çÓ©äÓ©ºÓ©▓Ó©íÓ╣ÇÓ©¬Ó©ÁÓ╣êÓ©óÓ©ç/exploit

Ó©äÓ©ºÓ©▓Ó©íÓ╣ÇÓ©¬Ó©ÁÓ╣êÓ©óÓ©çÓ©ÖÓ©ÁÓ╣ëÓ╣ÇÓ©üÓ©┤Ó©öÓ©éÓ©ÂÓ╣ëÓ©ÖÓ╣ÇÓ©íÓ©ÀÓ╣êÓ©¡Ó©£Ó©╣Ó╣ëÓ╣âÓ©èÓ╣ëÓ©¬Ó©▓Ó©íÓ©▓Ó©úÓ©ûÓ©¬Ó©úÓ╣ëÓ©▓Ó©çÓ╣üÓ©ÑÓ©░Ó©úÓ©▒Ó©ÖÓ╣éÓ©äÓ╣ëÓ©ö JavaScript Ó╣éÓ©öÓ©óÓ©üÓ©▓Ó©úÓ╣âÓ©èÓ╣ëÓ©ƒÓ©▒Ó©çÓ©üÓ╣îÓ©èÓ©▒Ó©Ö new Function() Ó©ùÓ©ÁÓ╣êÓ©úÓ©▒Ó©ÜÓ©äÓ╣êÓ©▓Ó©ùÓ©▓Ó©çÓ©áÓ©▓Ó©óÓ©ÖÓ©¡Ó©üÓ©íÓ©▓Ó©øÓ©úÓ©░Ó©íÓ©ºÓ©ÑÓ©£Ó©ÑÓ╣ÇÓ©øÓ╣çÓ©ÖÓ╣éÓ©äÓ╣ëÓ©ö native code

Ó©üÓ©▓Ó©úÓ©¡Ó©ÿÓ©┤Ó©ÜÓ©▓Ó©óÓ╣ÇÓ©ùÓ©äÓ©ÖÓ©┤Ó©äÓ©¬Ó©│Ó©½Ó©úÓ©▒Ó©ÜÓ©£Ó©╣Ó╣ëÓ©ØÓ©ÂÓ©üÓ©¡Ó©ÜÓ©úÓ©í

Ó©äÓ©ºÓ©▓Ó©íÓ╣ÇÓ©¬Ó©ÁÓ╣êÓ©óÓ©çÓ©ÖÓ©ÁÓ╣ëÓ╣ÇÓ©üÓ©┤Ó©öÓ©éÓ©ÂÓ╣ëÓ©ÖÓ╣ÇÓ©íÓ©ÀÓ╣êÓ©¡Ó©íÓ©ÁÓ©üÓ©▓Ó©úÓ©¬Ó©úÓ╣ëÓ©▓Ó©çÓ╣éÓ©äÓ╣ëÓ©ö JavaScript Ó©ùÓ©ÁÓ╣êÓ©¬Ó©▓Ó©íÓ©▓Ó©úÓ©ûÓ©ùÓ©│Ó╣âÓ©½Ó╣ëÓ©£Ó©╣Ó╣ëÓ╣âÓ©èÓ╣ëÓ©¬Ó©▓Ó©íÓ©▓Ó©úÓ©ûÓ©äÓ©ºÓ©ÜÓ©äÓ©©Ó©íÓ╣üÓ©ÑÓ©░Ó©¬Ó©úÓ╣ëÓ©▓Ó©çÓ╣éÓ©äÓ╣ëÓ©öÓ╣äÓ©öÓ╣ë Ó╣éÓ©öÓ©óÓ╣âÓ©èÓ╣ëÓ©ƒÓ©▒Ó©çÓ©üÓ╣îÓ©èÓ©▒Ó©Ö new Function() Ó©ùÓ©ÁÓ╣êÓ©úÓ©▒Ó©ÜÓ©äÓ╣êÓ©▓Ó©ùÓ©▓Ó©çÓ©áÓ©▓Ó©óÓ©ÖÓ©¡Ó©üÓ©íÓ©▓Ó©øÓ©úÓ©░Ó©íÓ©ºÓ©ÑÓ©£Ó©ÑÓ╣ÇÓ©øÓ╣çÓ©ÖÓ╣éÓ©äÓ╣ëÓ©ö native code

Ó╣éÓ©äÓ╣ëÓ©öÓ©ùÓ©ÁÓ╣êÓ©øÓ©ÑÓ©¡Ó©öÓ©áÓ©▒Ó©óÓ©¬Ó©│Ó©½Ó©úÓ©▒Ó©ÜÓ©£Ó©╣Ó╣ëÓ©ØÓ©ÂÓ©üÓ©¡Ó©ÜÓ©úÓ©í

function safeEval(expression) {
 try {
 // Ó©òÓ©úÓ©ºÓ©êÓ©¬Ó©¡Ó©ÜÓ©ºÓ╣êÓ©▓ expression Ó╣ÇÓ©øÓ╣çÓ©Ö string Ó©½Ó©úÓ©ÀÓ©¡Ó╣äÓ©íÓ╣ê
 if (typeof expression !== 'string') {
 throw new Error('Invalid input: expected a string');
 }

 // Ó©¬Ó©úÓ╣ëÓ©▓Ó©çÓ©ƒÓ©▒Ó©çÓ©üÓ╣îÓ©èÓ©▒Ó©Ö JavaScript Ó©êÓ©▓Ó©ü expression
 const func = new Function(...Object.keys(expression).map(key => {
 return `return ${expression[key]};`; // Ó╣âÓ©¬Ó╣êÓ╣éÓ©äÓ╣ëÓ©öÓ©ùÓ©ÁÓ╣êÓ©òÓ╣ëÓ©¡Ó©çÓ©üÓ©▓Ó©úÓ╣âÓ©½Ó╣ëÓ©ƒÓ©▒Ó©çÓ©üÓ╣îÓ©èÓ©▒Ó©ÖÓ©ùÓ©│
 }));

 // Ó©òÓ©úÓ©ºÓ©êÓ©¬Ó©¡Ó©ÜÓ©ºÓ╣êÓ©▓Ó©ƒÓ©▒Ó©çÓ©üÓ╣îÓ©èÓ©▒Ó©ÖÓ©¬Ó©▓Ó©íÓ©▓Ó©úÓ©ûÓ©øÓ©úÓ©░Ó©íÓ©ºÓ©ÑÓ©£Ó©ÑÓ╣äÓ©öÓ╣ëÓ©½Ó©úÓ©ÀÓ©¡Ó╣äÓ©íÓ╣ê
 if (typeof func === 'function') {
 return func();
 } else {
 throw new Error('Invalid input: expected a string');
 }
 } catch (error) {
 console.error(error);
 }
}