CVE-2026-83530 — Uncontrolled Memory Allocation in cel-go
A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur prop…
Published: 2026-09-09 · CVSS: 6.9 · CVSS 4.0
A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7