CVE-2025-68156

Expr has Denial of Service via Unbounded Recursion in Builtin Functions in github.com/expr-lang/expr

Description

Expr has Denial of Service via Unbounded Recursion in Builtin Functions in github.com/expr-lang/expr

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading

Score

7.5

Severity

High

Ecosystem

GO

Publish Date

December 22, 2025

Modified Date

February 3, 2026

Score Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Versions