Alpine/expat: high 8.1

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

Action: Upgrade expat to 2.4.9-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2022-40674#Alpine:v3.21/expat
• https://security.alpinelinux.org/vuln/CVE-2022-40674

published 2022-09-14T11:15:54.020Z · modified 2026-10-15T07:17:54.249823681Z · JSON