GO-2025-3525

vendorUSosv

Memory Exhaustion in Expr Parser with Unrestricted Input in github.com/expr-lang/expr

view advisory published 2025-03-18Licence: per source

Memory Exhaustion in Expr Parser with Unrestricted Input in github.com/expr-lang/expr

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-29786US——
Expr is an expression language and expression evaluation for Go. Prior to version 1.17.0, if the Expr expression parser is given an unbounded input string, it will attempt to compi…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan