TI-2026-53708 CVE-2026-76875 · GHSA-4h3r-h8c5-46cf
PyPy pyexpat ExternalEntityParserCreate Use-After-Free
Priority LOW 34
PyPy before versions 3.11.16 and 3.12.14 contains a use-after-free vulnerability in the pyexpat module's ExternalEntityParserCreate function that allows attackers to corrupt memory by supplying a crafted XML document to…