expr-lang github.com/expr-lang/expr vulnerabilities

Latest expr-lang github.com/expr-lang/expr CVEs

Newest publication first

1. CVE-2025-68156 Expr has Denial of Service via Unbounded Recursion in Builtin Functions

   Published 2025-12-16

   High·CVSS 7.5

   Several builtin functions in Expr, including flatten, min, max, mean, and median, perform recursive traversal over user-provided data structures without enforcing a maximum recursion depth. If the evaluation environment contains deeply nested or cyclic data structures, these func...

2. CVE-2025-29786 Memory Exhaustion in Expr Parser with Unrestricted Input

   Published 2025-03-28

   High·CVSS 7.5

   Impact If the Expr expression parser is given an unbounded input string, it will attempt to compile the entire string and generate an Abstract Syntax Tree (AST) node for each part of the expression. In scenarios where input size isn’t limited, a malicious or inadvertent extremely...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.