CVE-2026-83530

cel-go , the Go implementation of the Common Expression Language (CEL), is affected by an uncontrolled memory allocation vulnerability. A user can supply an expression whose string length exceeds the ParserExpressionSizeLimit() configured on the CEL environment, causing a memory allocation propor...

CVE-2026-83530 Uncontrolled Memory Allocation in cel-go

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

GO-2026-6094 JSON private fields exposed via NativeTypes and ParseStructTag in github.com/google/cel-go

JSON private fields exposed via NativeTypes and ParseStructTag in github.com/google/cel-go...