TI-2025-21197 CVE-2025-29786 · GHSA-93mq-9ffx-83m2
Memory Exhaustion in Expr Parser with Unrestricted Input
Priority MEDIUM 40
Expr is an expression language and expression evaluation for Go.
expr-lang
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
expr-lang records in CISA KEVNo expr-lang vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2025-41736 CVE-2025-68156 · GHSA-cfpf-hrx2-8rv6
Expr has Denial of Service via Unbounded Recursion in Builtin Functions
Priority LOW 39
Expr is an expression language and expression evaluation for Go.