1 matches found
cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag
The function ext.NativeTypesParseStructTag"json" does not honour the encoding/json skip directive json:"-". Fields tagged json:"-" are registered in the CEL type system under the literal name "-" and are readable from any user-submitted CEL expression via dynobj"-". Additionally, newNativeTypes...
5.9AI score
SaveExploits0References2Affected Software1
20