CVE-2026-83530

A flaw was found in cel-go. A user can trigger a Denial of Service DoS by submitting an expression that exceeds the configured parser expression size limit. Because memory is allocated proportional to the input length before the limit is validated, processing oversized inputs causes uncontrolled...

CVE-2026-83530

cel-go , the Go implementation of the Common Expression Language (CEL), is affected by an uncontrolled memory allocation vulnerability. A user can supply an expression whose string length exceeds the ParserExpressionSizeLimit() configured on the CEL environment, causing a memory allocation propor...

CVE-2026-83530 Uncontrolled Memory Allocation in cel-go

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

CVE-2026-83530 Uncontrolled Memory Allocation in cel-go

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

CVE-2026-83530 Uncontrolled Memory Allocation in cel-go

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

GO-2026-6094 JSON private fields exposed via NativeTypes and ParseStructTag in github.com/google/cel-go

JSON private fields exposed via NativeTypes and ParseStructTag in github.com/google/cel-go...

PT-2026-80341

JSON private fields exposed via NativeTypes and ParseStructTag in github.com/google/cel-go...

cel-go:fuzz_compile: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4868640388808704 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

cel-go:fuzz_compile: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4994799111897088 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: NULL Sanitizer: address ASAN Recommended...

cel-go:fuzz_compile: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6269856236830720 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

cel-go:fuzz_compile: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5719349403451392 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000036aea312 Crash State: NULL Sanitizer: address ASAN Recommended...

cel-go:fuzz_lpm: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4551058713083904 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzlpm Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

cel-go:fuzz_lpm: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5743414120415232 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzlpm Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

cel-go:fuzz_lpm: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5510374920159232 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzlpm Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000060e568b7 Crash State: pthreadcreate cgotrypthreadcreate pthreadcreate...

cel-go:fuzz_compile: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6162578035310592 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

cel-go:fuzz_compile: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6689514237067264 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

cel-go:fuzz_compile: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5294574810562560 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...