github.com/expr-lang/expr vulnerabilities (Go)

2 vulnerabilities.

• github.com/expr-lang/expr Go Expr has Denial of Service via Unbounded Recursion in Builtin Functions CVE-2025-68156 Fix available 7.5 HighDecember 16, 2025
• github.com/expr-lang/expr Go Memory Exhaustion in Expr Parser with Unrestricted Input CVE-2025-29786 Fix available 7.5 HighMarch 17, 2025