Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (5)
| Vulnerability |
Summary |
Aliases |
|
VCID-6y74-4uqv-dka3
|
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.
|
CVE-2024-50602
|
|
VCID-a7ry-4dn3-aaan
|
libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.
|
CVE-2023-52426
|
|
VCID-bmun-mv6e-aaar
|
libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.
|
CVE-2023-52425
|
|
VCID-mr2r-p1cb-aaam
|
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
|
CVE-2024-28757
|
|
VCID-xbh1-6d4r-cbfa
|
libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat
|
CVE-2024-8176
|