common_expression_language vulnerabilities

CVEs whose affected-version data names the common_expression_language package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-83530Medium· 4.3⚖ disputed

1mo ago

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be …

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be …

▾ Sunlitgoogle · common_expression_languageEPSS 0.16%via NVD