ALPINE-CVE-2026-56404

libexpat before 2.8.2 has an integer overflow in addBinding...