tocsin

CVE-2025-68156

2 advisories.

Go/github.com/expr-lang/expr CVE-2025-68156: high 7.5, EPSS 0.42%

Expr has Denial of Service via Unbounded Recursion in Builtin Functions

Action: Upgrade github.com/expr-lang/expr to 1.17.7 or later.

go get github.com/expr-lang/expr@v1.17.7

Affected

introducedfixedlast affected
01.17.7-

Fixed versions

1.17.7

Sources

CVE-2025-68156 · published · modified · JSON

Go/github.com/expr-lang/expr CVE-2025-68156: unknown, EPSS 0.42%

Expr has Denial of Service via Unbounded Recursion in Builtin Functions in github.com/expr-lang/expr

Action: Upgrade github.com/expr-lang/expr to 1.17.7 or later.

go get github.com/expr-lang/expr@v1.17.7

Affected

introducedfixedlast affected
01.17.7-

Fixed versions

1.17.7

Sources

CVE-2025-68156 · published · modified · JSON