Vulnerabilities in libexpat project
22 resultsCVE-2026-56409MEDIUMxmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.EPSS 0.1%CVE-2026-56132MEDIUMIn libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is misEPSS 0.1%