CVE-2026-76875

PyPy versions before 3.11.16 and 3.12.14 are vulnerable to a use-after-free flaw in the pyexpat module's ExternalEntityParserCreate function. The issue occurs when an application creates external-entity sub-parsers without retaining a reference to the parent parser; the child parser keeps a raw C...