Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/node-expat@2.3.0
purl pkg:npm/node-expat@2.3.0
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-naf7-p1jf-z3ds Improper Restriction of XML External Entity Reference `libexpat` in Expat, XML input including XML names that contain many colons could make the XML parser consume a high amount of RAM and CPU resources while processing, leading to a possible denial-of-service attack. CVE-2018-20843

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T20:55:38.438835+00:00 GitLab Importer Fixing VCID-naf7-p1jf-z3ds https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-expat/CVE-2018-20843.yml 38.4.0
2026-04-11T22:06:38.344815+00:00 GitLab Importer Fixing VCID-naf7-p1jf-z3ds https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-expat/CVE-2018-20843.yml 38.3.0
2026-04-02T22:19:27.125703+00:00 GitLab Importer Fixing VCID-naf7-p1jf-z3ds https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-expat/CVE-2018-20843.yml 38.1.0
2026-04-01T12:48:32.468755+00:00 GitLab Importer Fixing VCID-naf7-p1jf-z3ds https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-expat/CVE-2018-20843.yml 38.0.0