Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/expat@0?distro=trixie
purl pkg:deb/debian/expat@0?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-awtz-ujdq-efht The writeRandomBytes_RtlGenRandom function in xmlparse.c in libexpat in Expat 2.2.1 and 2.2.2 on Windows allows local users to gain privileges via a Trojan horse ADVAPI32.DLL in the current working directory because of an untrusted search path, aka DLL hijacking. CVE-2017-11742
VCID-f8mk-n3um-mufk Multiple vulnerabilities have been found in Expat, possibly resulting in Denial of Service. CVE-2012-1147

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T09:01:27.075969+00:00 Debian Importer Fixing VCID-f8mk-n3um-mufk https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:51:12.885633+00:00 Debian Importer Fixing VCID-awtz-ujdq-efht https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-11T18:03:02.240676+00:00 Debian Importer Fixing VCID-f8mk-n3um-mufk https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:56:47.231658+00:00 Debian Importer Fixing VCID-awtz-ujdq-efht https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:03:35.117062+00:00 Debian Importer Fixing VCID-f8mk-n3um-mufk https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:02:55.001661+00:00 Debian Importer Fixing VCID-awtz-ujdq-efht https://security-tracker.debian.org/tracker/data/json 38.1.0