Google Common Expression Language vulnerabilities

1 vulnerability

Known vulnerabilities in Google Common Expression Language, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.9CVE-2026-83530debiangolang-cel-cel-go+4
EPSS score
0.15%
A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced.