CVE-2026-56132 vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56405 vulnerabilities

Vulnerabilities for packages: expat...

GHSA-HQMJ-33CM-GQPQ vulnerabilities

Vulnerabilities for packages: expat...

GHSA-XQW9-F65G-5QXW vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56403 vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56408 vulnerabilities

Vulnerabilities for packages: expat...

GHSA-9JQ5-63HM-6Q5G vulnerabilities

Vulnerabilities for packages: expat...

GHSA-V2J6-3Q6Q-GM3G vulnerabilities

Vulnerabilities for packages: expat...

Multiple vulnerability found in Expat

Expat 2.8.2 was released yesterday. The key motivation for cutting a release and doing so now was getting security and non-security bugsfixes out to users. On the security side, 13 vulnerabilities have been fixed: CVE-2026-50219: missing control flow integrity checks CVE-2026-56131: missing contr...

Oracle Linux 9 : expat (ELSA-2026-23230)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-23230 advisory. - Fix CVE-2026-45186 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested fo...

SUSE CVE-2026-56403

libexpat before 2.8.2 has an integer overflow in storeAtts...

SUSE CVE-2026-56410

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

ALPINE-CVE-2026-56412

libexpat before 2.8.2 does not consider XMLTOKDATACHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219...

UBUNTU-CVE-2026-56412

libexpat before 2.8.2 does not consider XMLTOKDATACHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219...

ALPINE-CVE-2026-56405

libexpat before 2.8.2 has an integer overflow in getAttributeId...

CVE-2026-56407

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen...

ALPINE-CVE-2026-56404

libexpat before 2.8.2 has an integer overflow in addBinding...

CVE-2026-56403

libexpat before 2.8.2 has an integer overflow in storeAtts...

CVE-2026-56409

xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used...

UBUNTU-CVE-2026-56403

libexpat before 2.8.2 has an integer overflow in storeAtts...