Approved changes feed: RSS · Atom
cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Libexpat Project (e29c4727-b64c-50dc-9a8c-91c5ae43680d) |
|---|---|
| Product | Libexpat (a2405558-ea88-5206-8653-ff8a0583d290) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/libexpat/libexpat |
purl2cpe | 2026-06-01 10:15:47.572642 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7210 |
vulnerable | 2026-06-08 08:07:05.514522 |
The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection
`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.
Published: 2026-05-11T17:19:09.784Z
Updated: 2026-06-10T18:57:50.682Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50219 |
vulnerable | 2026-06-08 08:07:02.796372 |
Details available
MEDIUM (4.9)
libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,
Published: 2026-06-04T04:20:32.666Z
Updated: 2026-06-04T12:36:14.744Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45186 |
vulnerable | 2026-06-08 08:05:11.492892 |
Details available
LOW (2.9)
In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.
Published: 2026-05-10T06:36:16.927Z
Updated: 2026-07-15T00:52:52.352Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41080 |
vulnerable | 2026-06-08 08:03:14.705680 |
Details available
LOW (2.9)
libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.
Published: 2026-04-16T16:52:01.177Z
Updated: 2026-07-14T12:48:54.219Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32778 |
vulnerable | 2026-06-08 07:57:18.152630 |
Details available
LOW (2.9)
libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.
Published: 2026-03-16T07:02:34.410Z
Updated: 2026-07-14T12:48:51.559Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32777 |
vulnerable | 2026-06-08 07:57:18.152377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32776 |
vulnerable | 2026-06-08 07:57:18.152045 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25210 |
vulnerable | 2026-06-08 07:53:19.507350 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24515 |
vulnerable | 2026-06-08 07:51:17.785054 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66382 |
vulnerable | 2026-06-08 07:41:18.810883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59375 |
vulnerable | 2026-06-08 07:35:21.775057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50602 |
vulnerable | 2026-06-08 06:52:11.261317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45492 |
vulnerable | 2026-06-08 06:48:06.369713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45491 |
vulnerable | 2026-06-08 06:48:06.368694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45490 |
vulnerable | 2026-06-08 06:48:06.360567 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28757 |
vulnerable | 2026-06-08 06:33:27.206366 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52426 |
vulnerable | 2026-06-08 06:17:55.032071 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52425 |
vulnerable | 2026-06-08 06:17:55.031371 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43680 |
vulnerable | 2026-06-08 05:49:33.733564 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40674 |
vulnerable | 2026-06-08 05:48:27.876191 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25315 |
vulnerable | 2026-06-08 05:41:45.709762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25314 |
vulnerable | 2026-06-08 05:41:45.708683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25313 |
vulnerable | 2026-06-08 05:41:45.707241 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25236 |
vulnerable | 2026-06-08 05:41:45.592945 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25235 |
vulnerable | 2026-06-08 05:41:45.588342 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23990 |
vulnerable | 2026-06-08 05:40:59.470011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23852 |
vulnerable | 2026-06-08 05:40:59.267823 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22827 |
vulnerable | 2026-06-08 05:40:55.492135 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22826 |
vulnerable | 2026-06-08 05:40:55.491521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22825 |
vulnerable | 2026-06-08 05:40:55.490997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22824 |
vulnerable | 2026-06-08 05:40:55.490358 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22823 |
vulnerable | 2026-06-08 05:40:55.489578 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22822 |
vulnerable | 2026-06-08 05:40:55.486963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46143 |
vulnerable | 2026-06-08 05:36:49.771581 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45960 |
vulnerable | 2026-06-08 05:36:49.609771 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15903 |
vulnerable | 2026-06-08 05:12:58.200991 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20843 |
vulnerable | 2026-06-08 05:11:28.146387 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9233 |
vulnerable | 2026-06-08 05:10:09.509257 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5300 |
vulnerable | 2026-06-08 05:07:56.652850 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4472 |
vulnerable | 2026-06-08 05:07:54.617193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0718 |
vulnerable | 2026-06-08 05:07:15.902783 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1283 |
vulnerable | 2026-06-08 05:06:25.277787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0340 |
vulnerable | 2026-06-08 05:03:47.249028 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6702 |
vulnerable | 2026-06-08 05:03:01.581898 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1148 |
vulnerable | 2026-06-08 05:00:47.793878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1147 |
vulnerable | 2026-06-08 05:00:47.788281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0876 |
vulnerable | 2026-06-08 05:00:46.158395 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.