CVE-2026-76956

In libexpat versions 2.8.2 and 2.8.3 (before 2.8.4 ), a misinterpretation of the getentropy system call's return code results in insufficient entropy during hash table seeding. This exposes the parser to hash flooding attacks , where an attacker sends crafted XML content to trigger excessive coll...