[ Vendor · 4 CVEs ]
libexpat
CVEs affecting libexpat published in the last 30 days, plus any libexpat CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-115506 | 22 Oct 2026 | CVSS 7.5 | libexpatlibexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c… | |
| CVE-2026-113351 | 20 Oct 2026 | CVSS 5.9 | libexpatlibexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets… | |
| CVE-2026-77214 | 7 Oct 2026 | CVSS 8.2 | libexpatlibexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XML_ParseBuffer advances the parse buffer end with… | |
| CVE-2026-102633 | 29 Sep 2026 | CVSS 5.9 | libexpatlibexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing… |