Most recent entries from all

BELL-CVE-2026-41080

Affected: Alpaquita:23: expat, Alpaquita:25: expat, Alpaquita:stream: expat, BellSoft Hardened Containers:23: expat, BellSoft Hardened Containers:25: expat, BellSoft Hardened Containers:stream: expat

Withdrawn: CLEANSTART-2026-CT53141 — Security fixes in ingress-nginx-controller-1.14 1.14.5-r2

Withdrawn by the publisher.

Affected: CleanStart: ingress-nginx-controller-1.14

Package ingress-nginx-controller-1.14 version 1.14.5-r2 fixes 2 vulnerabilities: CVE-2026-45186, CVE-2026-41080

EUVD-2026-336386

fkie_cve-2026-41080

libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

GHSA-fpqv-cr66-h6pc

libexpat before 2.7.6 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

msrc_CVE-2026-41080 — CVE-2026-41080

msrc_CVE-2026-41080

OESA-2026-2293 — expat security update

Affected: openEuler:24.03-LTS: expat

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fix(es):

libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.(CVE-2026-41080)

openSUSE-SU-2026:10787-1 — expat-2.8.1-1.1 on GA media

expat-2.8.1-1.1 on GA media

RHSA-2026:11004 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

SSA-082556 — SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.

SUSE-SU-2026:23894-1 — Security update for expat

Security update for expat

UBUNTU-CVE-2026-41080

Affected: Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: expat, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: expat, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: cadaver, Ubuntu:Pro:16.04:LTS: coin3 and 64 more

libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

WID-SEC-W-2026-1159 — expat: Schwachstelle ermöglicht Denial of Service

Ein lokaler Angreifer kann eine Schwachstelle in expat ausnutzen, um einen Denial of Service Angriff durchzuführen.