{"id":"CVE-2026-83530","title":"A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be …","summary":"A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be …","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-789","CWE-770"],"vendor":"google","product":"common_expression_language","affected":["common_expression_language < 0.29.0"],"patched":["common_expression_language 0.29.0"],"published":"2026-09-09","updated":"2026-09-23","sourceUpdated":"2026-09-23T20:38:26.053","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-83530","references":[{"url":"https://github.com/cel-expr/cel-go/pull/1302","label":"cve-coordination@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-83530.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-83530"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542790"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-83530"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83530"}],"tags":["nvd","cve.org","csaf","vex","red-hat","score-dispute"],"epss":0.00161,"epssPercentile":0.05202,"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-09T15:15:05.009764Z"},"scores":{"nvd":4.3,"cna":6.9,"vendor":5.3},"ingestedAt":"2026-09-14T00:02:15.467Z","slug":"CVE-2026-83530","body":"## Overview\n\nA user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced.\n\n## Affected\n\n- `common_expression_language < 0.29.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `common_expression_language 0.29.0`\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat OpenShift Container Platform 4 · updated 2026-09-29 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-83530.json)","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":209894,"id":"CVE-2026-83530","ts":1790199227955,"field":"cvss","old":"6.9","new":"4.3"}]}