ROOT-OS-DEBIAN-12-CVE-2026-45186 CVE-2026-45186 in rootio-expat - Patched by Root

Root has patched CVE-2026-45186 in the rootio-expat package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-45186 vulnerabilities

Vulnerabilities for packages: expat...

expat security update

An update is available for expat. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Expat is a C library for parsing XML documents. Security Fixes: libexpat: denia...

CLSA-2026-1779359157 Fix CVE(s): CVE-2026-45186

SECURITY UPDATE: Denial of service via quadratic attribute-name collision check in libexpat before 2.8.1 - debian/patches/CVE-2026-45186.patch: introduce per-element defaultAttsNames hash table and use it for O1 attribute collision detection in defineAttribute - CVE-2026-45186...

Photon OS 4.0: Expat PHSA-2026-4.0-1022

An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1022. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLSA-2026-1779183996 expat: Fix of CVE-2026-45186

CVE-2026-45186: fix quadratic complexity in attribute name collision check...

CLSA-2026-1779183767 expat: Fix of CVE-2026-45186

CVE-2026-45186: fix quadratic complexity in attribute name collision check...

CLSA-2026-1779130424 expat: Fix of CVE-2026-45186

CVE-2026-45186: fix quadratic complexity in attribute name collision check...

CLSA-2026-1779129222 Fix CVE(s): CVE-2026-45186

SECURITY UPDATE: fix quadratic complexity in attribute name collision check - debian/patches/CVE-2026-45186.patch: fix quadratic complexity in attribute name collision check - CVE-2026-45186...

CVE-2026-45186

creationtimestamp| type| source ---|---|--- 2026-05-11 19:56:19+00:00| seen| https://bsky.app/profile/news.karthihegde.dev/post/3mlm2lx2ofq23 2026-05-11 19:56:19+00:00| seen| https://bsky.app/profile/news.karthihegde.dev/post/3mlm2lx2ofq23 2026-05-11 20:00:05+00:00| seen|...

Vulnerability found in Expat

Expat 2.8.1 was released yesterday. The key motivation for cutting a release and doing so now was: Fixing vulnerability CVE-2026-45186 that allows easy denial of service. See also https://github.com/libexpat/libexpat/pull/1216...