CVE-2026-83530
Uncontrolled Memory Allocation in cel-go
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced.
| CWE | CWE-789 |
| Vendor | |
| Product | cel-go |
| Ecosystems | |
| Industries | Technology |
| Published | Sep 9, 2026 |
| Last Updated | Sep 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for google cel-go
Be the first to know when new unknown vulnerabilities affecting google cel-go are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Google / cel-go
0 < 0.29.0
Credits
Ali Firas (thesmartshadow)