What’s Vulnerable › Products

expr-lang expr vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your expr-lang expr version is affected

Latest expr-lang expr vulnerabilities

• CVE-2025-68156 — Expr has Denial of Service via Unbounded Recursion in Builtin Functions (CVSS 7.5)
• CVE-2025-29786 — Memory Exhaustion in Expr Parser with Unrestricted Input (CVSS 7.5)