Junglewise Threat Intelligence

cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag

Severity: medium · CVSS 4 · Published 2026-07-24

Technologies: github.com/google/cel-go (Go). Vendors: Go.

Executive brief

cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag

Affected products

Go github.com/google/cel-go

Related threats

GO-2026-6094 - JSON private fields exposed via NativeTypes and ParseStructTag in github.com/google/cel-go
Google cel-go private field exposure via JSON struct tags