Debian/expat: unknown
Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified attributes with non-no
Action: Upgrade expat to 2.9.0-1~deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.0-1~deb13u1 | - |
Fixed versions
| 2.9.0-1~deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-66046#Debian:13/expat
- https://security-tracker.debian.org/tracker/CVE-2026-66046
published · modified · JSON