GHSA-FCHF-WVCC-QF9G vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-50219 vulnerabilities

Vulnerabilities for packages: expat...

GHSA-V3CW-2F3G-F38X vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56411 vulnerabilities

Vulnerabilities for packages: expat...

GHSA-638V-9W3R-GH6Q vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56409 vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56403 vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56408 vulnerabilities

Vulnerabilities for packages: expat...

GHSA-XQW9-F65G-5QXW vulnerabilities

Vulnerabilities for packages: expat...

GHSA-9JQ5-63HM-6Q5G vulnerabilities

Vulnerabilities for packages: expat...

GHSA-HQMJ-33CM-GQPQ vulnerabilities

Vulnerabilities for packages: expat...

GHSA-V2J6-3Q6Q-GM3G vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56405 vulnerabilities

Vulnerabilities for packages: expat...

Multiple vulnerability found in Expat

Expat 2.8.2 was released yesterday. The key motivation for cutting a release and doing so now was getting security and non-security bugsfixes out to users. On the security side, 13 vulnerabilities have been fixed: CVE-2026-50219: missing control flow integrity checks CVE-2026-56131: missing contr...

OESA-2026-2769 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a poli...

Oracle Linux 9 : expat (ELSA-2026-23230)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-23230 advisory. - Fix CVE-2026-45186 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested fo...

SUSE CVE-2026-56403

libexpat before 2.8.2 has an integer overflow in storeAtts...

SUSE CVE-2026-56410

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

ALPINE-CVE-2026-56412

libexpat before 2.8.2 does not consider XMLTOKDATACHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219...

UBUNTU-CVE-2026-56412

libexpat before 2.8.2 does not consider XMLTOKDATACHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219...