CVE-2026-83530

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced.

Score

CVSS 4.0 6.9 Medium

Status

Analyzed - cve-coordination@google.com

Published

2026-09-09

Last modified

2026-09-09

Weaknesses

CWE-789

Affected products

• Cel-go (Google)
• Common Expression Language (Google)

References

• https://github.com/cel-expr/cel-go/pull/1302