Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat

Expat also known as libexpat prior to version 2.4.4 has a signed integer overflow issue in XMLGetBuffer, especially for configurations where XMLCONTEXTBYTES is non-zero...

Astra Linux – Vulnerability in Firefox and Thunderbird

In ExPat before version 2.7.2, the libexpat library allowed attackers to trigger large dynamic memory allocations through a small document that was submitted for parsing...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok

In xmlparse.c within Expat also known as libexpat, prior to version 2.4.5, attackers could insert namespace-separator characters into namespace URIs...

EulerOS 2.0 SP11 : expat (EulerOS-SA-2026-3120)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.7.5 allows an infinite loop while parsing DTD content.CVE-2026-32777 libexpat before 2.7.5 allows a NULL pointer dereference with...

EulerOS 2.0 SP15 : expat (EulerOS-SA-2026-2882)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted X...

EulerOS 2.0 SP15 : expat (EulerOS-SA-2026-2923)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted X...

Amazon Linux 2 : expat, --advisory ALAS2-2026-3800 (ALAS-2026-3800)

The version of expat installed on the remote host is prior to 2.1.0-15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3800 advisory. libexpat before 2.8.2 has an integer overflow in storeAtts. CVE-2026-56403 libexpat before 2.8.2 has an integer overflow in...

MiracleLinux 9 : expat-2.5.0-6.el9_8.1 (AXSA:2026-1307:09)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1307:09 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 Tenable has extracted the preceding description block directly from the MiracleLinux securit...

EulerOS 2.0 SP12 : expat (EulerOS-SA-2026-2586)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.7.5 allows an infinite loop while parsing DTD content.CVE-2026-32777 libexpat before 2.7.5 allows a NULL pointer dereference with...

USN-8520-1 expat vulnerability

It was discovered that Expat used insufficient entropy when generating hash salt values for its internal hash table. An attacker could use this to craft an XML document that triggers hash flooding, leading to a denial of service...

CVE-2026-41080 affecting package expat for versions less than 2.8.2-1

CVE-2026-41080 affecting package expat for versions less than 2.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56403 affecting package expat for versions less than 2.8.2-1

CVE-2026-56403 affecting package expat for versions less than 2.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56412 affecting package expat for versions less than 2.8.2-1

CVE-2026-56412 affecting package expat for versions less than 2.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-50219 affecting package expat for versions less than 2.8.2-1

CVE-2026-50219 affecting package expat for versions less than 2.8.2-1. An upgraded version of the package is available that resolves this issue...

Amazon Linux 2 : expat, --advisory ALAS2-2026-3495 (ALAS-2026-3495)

The version of expat installed on the remote host is prior to 2.1.0-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3495 advisory. In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocatio...

GHSA-5QXM-QVMJ-8V79 vulnerabilities

Vulnerabilities for packages: expat...

GHSA-857Q-6V86-XP84 vulnerabilities

Vulnerabilities for packages: expat...

GHSA-9RPF-MHCJ-GV7R vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-45186 vulnerabilities

Vulnerabilities for packages: expat...

EulerOS 2.0 SP15 : expat (EulerOS-SA-2026-2480)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.CVE-2026-32778...