TI-2026-53753 CVE-2026-76957 · GHSA-vfgp-2986-rm7g
Use after free in libexpat
Priority LOW 33
libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks.
Vulnerabilities
2 records
TI-2026-53752 CVE-2026-76956 · GHSA-x282-q22w-c9hm
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code…
Priority LOW 39
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted X…