Search for packages
| purl | pkg:deb/debian/expat@2.5.0-1 |
| Tags | Ghost |
| Next non-vulnerable version | 2.5.0-1+deb12u2 |
| Latest non-vulnerable version | 2.7.1-1 |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-a7ry-4dn3-aaan
Aliases: CVE-2023-52426 |
libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time. |
Affected by 5 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-bmun-mv6e-aaar
Aliases: CVE-2023-52425 |
libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed. |
Affected by 5 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-mr2r-p1cb-aaam
Aliases: CVE-2024-28757 |
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate). |
Affected by 5 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-10-20T10:21:56.245691+00:00 | Debian Importer | Fixing | VCID-8e29-n224-fqdm | https://security-tracker.debian.org/tracker/data/json | 34.0.2 |
| 2024-10-20T10:21:55.431476+00:00 | Debian Importer | Fixing | VCID-s2ze-avjx-q7av | https://security-tracker.debian.org/tracker/data/json | 34.0.2 |
| 2024-10-20T10:21:54.625105+00:00 | Debian Importer | Fixing | VCID-k2w7-g7cv-2bhs | https://security-tracker.debian.org/tracker/data/json | 34.0.2 |
| 2024-10-11T05:38:57.081157+00:00 | Debian Importer | Affected by | VCID-mr2r-p1cb-aaam | https://security-tracker.debian.org/tracker/data/json | 34.0.2 |
| 2024-10-11T01:25:30.992284+00:00 | Debian Importer | Affected by | VCID-a7ry-4dn3-aaan | https://security-tracker.debian.org/tracker/data/json | 34.0.2 |
| 2024-10-11T01:25:29.356647+00:00 | Debian Importer | Affected by | VCID-bmun-mv6e-aaar | https://security-tracker.debian.org/tracker/data/json | 34.0.2 |
| 2024-10-08T08:56:43.576012+00:00 | Debian Importer | Fixing | VCID-m3u3-h1z5-aaam | https://security-tracker.debian.org/tracker/data/json | 34.0.2 |
| 2024-09-25T22:09:00.181827+00:00 | Debian Importer | Fixing | VCID-8e29-n224-fqdm | https://security-tracker.debian.org/tracker/data/json | 34.0.1 |
| 2024-09-25T22:08:59.131004+00:00 | Debian Importer | Fixing | VCID-s2ze-avjx-q7av | https://security-tracker.debian.org/tracker/data/json | 34.0.1 |
| 2024-09-25T22:08:58.259857+00:00 | Debian Importer | Fixing | VCID-k2w7-g7cv-2bhs | https://security-tracker.debian.org/tracker/data/json | 34.0.1 |
| 2024-09-25T19:48:55.970361+00:00 | Debian Importer | Affected by | VCID-mr2r-p1cb-aaam | https://security-tracker.debian.org/tracker/data/json | 34.0.1 |
| 2024-09-23T07:22:46.183016+00:00 | Debian Importer | Fixing | VCID-m3u3-h1z5-aaam | https://security-tracker.debian.org/tracker/data/json | 34.0.1 |
| 2024-09-20T05:59:12.518993+00:00 | Debian Importer | Affected by | VCID-a7ry-4dn3-aaan | https://security-tracker.debian.org/tracker/data/json | 34.0.1 |
| 2024-09-20T05:59:11.144486+00:00 | Debian Importer | Affected by | VCID-bmun-mv6e-aaar | https://security-tracker.debian.org/tracker/data/json | 34.0.1 |
| 2024-05-20T15:13:48.510396+00:00 | Debian Importer | Affected by | VCID-a7ry-4dn3-aaan | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |
| 2024-05-20T15:13:46.886459+00:00 | Debian Importer | Affected by | VCID-bmun-mv6e-aaar | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |
| 2024-04-24T08:21:21.912490+00:00 | Debian Importer | Fixing | VCID-m3u3-h1z5-aaam | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |
| 2024-04-24T08:21:17.002819+00:00 | Debian Importer | Fixing | VCID-m3u3-h1z5-aaam | None | 34.0.0rc4 |
| 2024-01-10T10:22:36.329973+00:00 | Debian Importer | Fixing | VCID-m3u3-h1z5-aaam | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc2 |
| 2024-01-10T10:20:27.028523+00:00 | Debian Importer | Fixing | VCID-m3u3-h1z5-aaam | None | 34.0.0rc2 |
| 2024-01-04T02:49:16.273573+00:00 | Debian Importer | Fixing | VCID-m3u3-h1z5-aaam | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc1 |
| 2024-01-04T02:49:05.591923+00:00 | Debian Importer | Fixing | VCID-m3u3-h1z5-aaam | None | 34.0.0rc1 |