Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-83530

Uncontrolled Memory Allocation in cel-go

Description

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Google cel-go

Default version status: unaffected

  • 0 to < 0.29.0affected

References