Vulnerabilities in libexpat project
26 resultsCVE-2026-56410MEDIUMxmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.EPSS 0.1%CVE-2026-56411MEDIUMxmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.EPSS 0.1%CVE-2026-56405MEDIUMlibexpat before 2.8.2 has an integer overflow in getAttributeId.EPSS 0.1%CVE-2026-56408MEDIUMlibexpat before 2.8.2 has an integer overflow in copyString.EPSS 0.1%CVE-2026-56409MEDIUMxmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.EPSS 0.1%CVE-2026-76957MEDIUMlibexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is simiEPSS 0.1%