Google: >> Common Expression Language >> 0.15.2 Security Vulnerabilities
A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced.
CVSS Score
6.9
EPSS Score
0.002
Published
2026-09-09