Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/24 4:48 p.m.•51 views

cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag

The function ext.NativeTypesParseStructTag"json" does not honour the encoding/json skip directive json:"-". Fields tagged json:"-" are registered in the CEL type system under the literal name "-" and are readable from any user-submitted CEL expression via dynobj"-". Additionally, newNativeTypes...

5.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder