Skip to content
OpenAdvisories

Package · Go

github.com/google/cel-go

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-gcjh-h69q-9w9g

    cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag

    The function `ext.NativeTypes(ParseStructTag("json"))` does not honour the `encoding/json` skip directive `json:"-"`. Fields tagged `json:"-"` are registered in the CEL type system under the literal name `"-"` and are readable from any user-submitted CEL expr…

    github.com/google/cel-go Go