Debian/golang-github-google-cel-go: medium 4.3
A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of
Action: Upgrade golang-github-google-cel-go to 0.30.0+ds-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.30.0+ds-1 | - |
Fixed versions
| 0.30.0+ds-1 |
Sources
- osv: DEBIAN-CVE-2026-83530#Debian:14/golang-github-google-cel-go
- https://security-tracker.debian.org/tracker/CVE-2026-83530
published · modified · JSON