CVE-2025-68156

CVE-2025-68156 is a denial-of-service vulnerability affecting Expr, an expression language for Go, prior to version 1.17.7. Certain builtin functions (e.g., flatten, min, max) can cause a stack overflow panic and application crash when processing deeply nested or cyclic data structures without a maximum recursion depth. This vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-exploitable issue with low attack complexity that can lead to high availability impact. While there is no evidence of active exploitation or public exploit code, and community discussion is minimal, the FAUCET Risk Score is 85/100, highlighting its potential impact.