Vulnerability in Google Cel-Go

CVE-2026-83530

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced.

Affected products

Weakness classification (CWE)

References