| Package | Affected versions | Patched versions |
|---|---|---|
| common expression language | < 0.29.0 | 0.29.0 |
A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free