CVE Intelligence

Google Common Expression Language vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Google Common Expression Language: 1 record(s), with affected versions and fixes.
cpe:2.3:a:google:common_expression_language

CVE-2026-83530 Medium · 4.3 CWE-789 Sep 9, 2026
Uncontrolled Memory Allocation in cel-go
A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced.