https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:25:43.282337+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-56131 BELL-CVE-2026-56131 2026-10-03T18:25:43.298541+00:00

Affected: Alpaquita:23: expat, Alpaquita:25: expat, Alpaquita:stream: expat, BellSoft Hardened Containers:23: expat, BellSoft Hardened Containers:25: expat, BellSoft Hardened Containers:stream: expat

 https://cve.radiocsirt.org/vuln/euvd-2026-328902 EUVD-2026-328902 2026-10-03T18:25:43.298599+00:00 EUVD-2026-328902 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56131 fkie_cve-2026-56131 2026-10-03T18:25:43.298614+00:00

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

 https://cve.radiocsirt.org/vuln/ghsa-fchf-wvcc-qf9g GHSA-fchf-wvcc-qf9g 2026-10-03T18:25:43.298638+00:00

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-56131 msrc_CVE-2026-56131 — libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of… 2026-10-03T18:25:43.298653+00:00 msrc_CVE-2026-56131 https://cve.radiocsirt.org/vuln/oesa-2026-2768 OESA-2026-2768 — expat security update 2026-10-03T18:25:43.298671+00:00

Affected: openEuler:22.03-LTS-SP4: expat

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fix(es):

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).(CVE-2026-56131)

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.(CVE-2026-56132)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11584-1 openSUSE-SU-2026:11584-1 — expat-2.8.2-1.1 on GA media 2026-10-03T18:25:43.298694+00:00

expat-2.8.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:40486 RHSA-2026:40486 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-03T18:25:43.298714+00:00

libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding libexpat: libexpat: Arbitrary code execution due to integer overflow

 https://cve.radiocsirt.org/vuln/suse-su-2026:23894-1 SUSE-SU-2026:23894-1 — Security update for expat 2026-10-03T18:25:43.298731+00:00

Security update for expat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56131 UBUNTU-CVE-2026-56131 2026-10-03T18:25:43.298750+00:00

Affected: Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: expat, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: expat, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: cadaver, Ubuntu:Pro:16.04:LTS: coin3 and 64 more

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2008 WID-SEC-W-2026-2008 — expat: Mehrere Schwachstellen 2026-10-03T18:25:43.298826+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in expat ausnutzen, um einen Denial of Service Angriff durchzuführen oder potentiell Code auszuführen.