What is GHSA-c2gw-4533-c2w3?

GHSA-c2gw-4533-c2w3 is a security advisory published by GitHub Security Advisories with Medium severity. A user could provide an expression whose string length is longer than the...

Which CVE IDs does GHSA-c2gw-4533-c2w3 cover?

GHSA-c2gw-4533-c2w3 covers the following CVE IDs: CVE-2026-83530. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-c2gw-4533-c2w3Medium

A user could provide an expression whose string length is longer than the...

Vendor

GitHub Security Advisories

Published

September 9, 2026

Last Modified

September 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-83530 →

📋 Description

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-83530
https://github.com/cel-expr/cel-go/pull/1302
https://github.com/advisories/GHSA-c2gw-4533-c2w3