Known vulnerabilities in expr

Software: expr
Software CPE: cpe:2.3:a:the_expr_expression_language:expr:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting expr expr is affected by 2 known vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120232 - Uncontrolled Recursion
CVE-2025-68156
CWE-674 Medium
No
No
1.17.7 22.12.2025 SB2025122249
SB2025122250
SB2025122251
and 12 more
#VU112435 - Resource exhaustion
CVE-2025-29786
CWE-400 Medium
No
No
1.17.0 07.07.2025 SB2025070753
SB2025070755
SB2025121138
and 1 more