CVE-2026-83530
Uncontrolled Memory Allocation in cel-go
A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced.
CVSS 4.0 · 6.9 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products