PT-2026-39908

In libexpat before 2.7.4, XML ExternalEntityParserCreate does not copy unknown encoding handler user data...

PT-2025-46034

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via XML ExternalEntityParserCreate...

PT-2022-1384

Name of the Vulnerable Software and Affected Versions libexpat versions 2.4.9 and earlier Description The issue is related to a use-after-free vulnerability in the XML ExternalEntityParserCreate function of the libexpat XML parsing library. This vulnerability can be exploited by a remote attacker...