Alpine/expat: critical 9.8

build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

Action: Upgrade expat to 2.4.3-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2022-22823#Alpine:v3.15/expat
• https://security.alpinelinux.org/vuln/CVE-2022-22823

published 2022-01-10T14:12:56.270Z · modified 2026-10-15T07:17:54.162535449Z · JSON