CVE-2025-10954

CVE-2025-10954 is a high-severity vulnerability affecting versions of github.com/nyaruka/phonenumbers prior to 1.2.2, specifically impacting the phonenumbers.Parse() function within products like textit phonenumbers. An unauthenticated attacker can trigger a denial-of-service condition by providing specially crafted input, leading to a "runtime error: slice bounds out of range" panic. The vulnerability has a CVSS score of 7.5, indicating a high impact on availability with low attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.