LI
Product
libexpat
65
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 24Medium 22Low 2
Watch
Add libexpat to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41080 | 2.9 | Apr 16 | libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document Affected: before 2.8.0 |
| CVE-2026-24515 | 2.5 | Jan 23 | In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data Affected: before 2.7.4 |
Showing 2