CLSA-2026-1779122132 expat: Fix of CVE-2026-45186

CVE-2026-45186: fix quadratic runtime behavior in attribute collision detection...