Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/node-expat@2.1.4
purl pkg:npm/node-expat@2.1.4
Next non-vulnerable version 2.3.0
Latest non-vulnerable version 2.3.0
Risk 3.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-6c4q-2my8-aqbc
Aliases:
CVE-2016-5300
Uncontrolled Resource Consumption The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document.
2.2.0
Affected by 1 other vulnerability.
VCID-naf7-p1jf-z3ds
Aliases:
CVE-2018-20843
Improper Restriction of XML External Entity Reference `libexpat` in Expat, XML input including XML names that contain many colons could make the XML parser consume a high amount of RAM and CPU resources while processing, leading to a possible denial-of-service attack.
2.3.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T20:55:38.432585+00:00 GitLab Importer Affected by VCID-naf7-p1jf-z3ds https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-expat/CVE-2018-20843.yml 38.4.0
2026-04-16T20:34:13.643800+00:00 GitLab Importer Affected by VCID-6c4q-2my8-aqbc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-expat/CVE-2016-5300.yml 38.4.0
2026-04-11T22:06:38.336597+00:00 GitLab Importer Affected by VCID-naf7-p1jf-z3ds https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-expat/CVE-2018-20843.yml 38.3.0
2026-04-11T21:44:41.725611+00:00 GitLab Importer Affected by VCID-6c4q-2my8-aqbc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-expat/CVE-2016-5300.yml 38.3.0
2026-04-02T22:19:27.119100+00:00 GitLab Importer Affected by VCID-naf7-p1jf-z3ds https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-expat/CVE-2018-20843.yml 38.1.0
2026-04-02T21:58:45.749994+00:00 GitLab Importer Affected by VCID-6c4q-2my8-aqbc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-expat/CVE-2016-5300.yml 38.1.0
2026-04-01T16:37:14.271676+00:00 GitLab Importer Affected by VCID-naf7-p1jf-z3ds https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-expat/CVE-2018-20843.yml 38.0.0
2026-04-01T16:16:02.401046+00:00 GitLab Importer Affected by VCID-6c4q-2my8-aqbc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-expat/CVE-2016-5300.yml 38.0.0