{"id":"CVE-2022-25235","aliases":["ALPINE-CVE-2022-25235","ALSA-2022:0818","ALSA-2022:0845","ALSA-2022:0951","ALSA-2022:1643","ALSA-2022:7811","AZL-43681","AZL-44607","AZL-8603","BELL-CVE-2022-25235","CLSA-2022-1660757175","CLSA-2022-1660758476","CLSA-2022-1660759632","CLSA-2022-1660760528","CLSA-2022-1660762248","DEBIAN-CVE-2022-25235","DLA-2935-1","DSA-5085-1","EUVD-2022-29933","GHSA-8mw4-grgw-m3fp","JLSEC-2025-52","MGASA-2022-0081","MGASA-2022-0156","MGASA-2022-0157","MGASA-2022-0183","OESA-2022-1554","OESA-2022-1588","OESA-2022-2057","OESA-2022-2085","OESA-2024-1815","RHBA-2022:4046","RHSA-2022:0815","RHSA-2022:0816","RHSA-2022:0817","RHSA-2022:0818","RHSA-2022:0824","RHSA-2022:0843","RHSA-2022:0845","RHSA-2022:0847","RHSA-2022:0850","RHSA-2022:0853","RHSA-2022:0951","RHSA-2022:1012","RHSA-2022:1053","RHSA-2022:1068","RHSA-2022:1069","RHSA-2022:1070","RHSA-2022:1263","RHSA-2022:1309","RHSA-2022:1539","RHSA-2022:1540","RHSA-2022:1643","RHSA-2022:1644","RHSA-2022:7811","RLSA-2022:0818","RLSA-2022:0845","RLSA-2022:0951","RLSA-2022:1643","SUSE-SU-2022:0698-1","SUSE-SU-2022:0713-1","SUSE-SU-2022:14903-1","SUSE-SU-2022:2294-1","UBUNTU-CVE-2022-25235","USN-5288-1","USN-5455-1","USN-8235-1","USN-8240-1","USN-8241-1","USN-8313-1","USN-8314-1","USN-8316-1","openSUSE-SU-2022:0713-1","openSUSE-SU-2024:11866-1"],"status":"published","title":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...","description":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.04955,"percentile":0.92246,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-116"],"published":"2022-02-15T00:00:00Z","modified":"2026-11-05T05:36:30Z","exploits":[{"source":"pocgithub","id":"Satheesh575555/external_expat_AOSP10_r33_CVE-2022-25235","title":"Satheesh575555/external_expat_AOSP10_r33_CVE-2022-25235","date":"2022-05-24","url":"https://github.com/Satheesh575555/external_expat_AOSP10_r33_CVE-2022-25235"},{"source":"pocgithub","id":"federiconbaez/cortex9-expat-utf8-name-validation-model","title":"federiconbaez/cortex9-expat-utf8-name-validation-model","date":"2026-11-06","url":"https://github.com/federiconbaez/cortex9-expat-utf8-name-validation-model"}],"fixes":[{"ecosystem":"Alpine:v3.12","package":"expat","fixed_in":["2.2.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"expat","fixed_in":["2.2.10-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"expat","fixed_in":["2.4.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"expat","fixed_in":["2.4.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"expat","fixed_in":["2.4.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"expat","fixed_in":["2.4.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"expat","fixed_in":["2.4.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"expat","fixed_in":["2.4.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"expat","fixed_in":["2.4.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"expat","fixed_in":["2.4.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"expat","fixed_in":["2.4.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"expat","fixed_in":["2.4.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"expat","fixed_in":["2.4.5-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"xmlrpc-c-c++","fixed_in":["1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"xmlrpc-c-client++","fixed_in":["1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"xmlrpc-c-devel","fixed_in":["1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"expat","fixed_in":["2.4.8-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"expat","fixed_in":["2.4.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"expat","fixed_in":["2.4.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"expat","fixed_in":["2.4.5-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Expat_jll","fixed_in":["2.4.8+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"xmlrpc-c","fixed_in":["1.51.06-1.1.mga8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c","fixed_in":["0:1.51.0-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-apps-debuginfo","fixed_in":["0:1.51.0-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-c++-debuginfo","fixed_in":["0:1.51.0-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-client++-debuginfo","fixed_in":["0:1.51.0-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-client","fixed_in":["0:1.51.0-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-client-debuginfo","fixed_in":["0:1.51.0-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-debuginfo","fixed_in":["0:1.51.0-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-debugsource","fixed_in":["0:1.51.0-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-apps-debuginfo","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-c++-debuginfo","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-client++-debuginfo","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-client","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-client-debuginfo","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-debuginfo","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-debugsource","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-apps-debuginfo","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-c++","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-c++-debuginfo","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-client++","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-client++-debuginfo","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-client-debuginfo","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-debuginfo","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-debugsource","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-devel","fixed_in":["0:1.51.0-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-apps-debuginfo","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-c++-debuginfo","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-client++-debuginfo","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-client","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-client-debuginfo","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-debuginfo","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-debugsource","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-apps-debuginfo","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-c++","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-c++-debuginfo","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-client++","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-client++-debuginfo","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-client-debuginfo","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-debuginfo","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-debugsource","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-devel","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-apps-debuginfo","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-c++-debuginfo","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-client++-debuginfo","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-client","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-client-debuginfo","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-debuginfo","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-debugsource","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-apps-debuginfo","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-c++","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-c++-debuginfo","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-client++","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-client++-debuginfo","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-client-debuginfo","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-debuginfo","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-debugsource","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-devel","fixed_in":["0:1.51.0-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"xmlrpc-c","fixed_in":["0:1.51.0-5.el8_5.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"expat","fixed_in":["2.1.0-4ubuntu1.4+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"coin3","fixed_in":["3.1.4~abc9f50-4ubuntu2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"xmlrpc-c","fixed_in":["1.33.06-0ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"expat","fixed_in":["2.1.0-7ubuntu0.16.04.5+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"coin3","fixed_in":["3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"insighttoolkit","fixed_in":["3.20.1+git20120521-6ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxmltok","fixed_in":["1.2-3ubuntu0.16.04.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"swish-e","fixed_in":["2.4.7-4ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ayttm","fixed_in":["0.6.3-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cableswig","fixed_in":["0.1.0+git20150808-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"xmlrpc-c","fixed_in":["1.33.14-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"expat","fixed_in":["2.2.5-3ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"coin3","fixed_in":["3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxmltok","fixed_in":["1.2-4ubuntu0.18.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"swish-e","fixed_in":["2.4.7-5ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"xmlrpc-c","fixed_in":["1.33.14-8ubuntu0.18.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"expat","fixed_in":["2.2.9-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxmltok","fixed_in":["1.2-4ubuntu0.20.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"swish-e","fixed_in":["2.4.7-6ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"xmlrpc-c","fixed_in":["1.33.14-8ubuntu0.20.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"firefox","fixed_in":["1:1snap1-0ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libxmltok","fixed_in":["1.2-4ubuntu0.22.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"swish-e","fixed_in":["2.4.7-6.1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"xmlrpc-c","fixed_in":["1.33.14-10ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libxmltok","fixed_in":["1.2-4.1ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"swish-e","fixed_in":["2.4.7-6.2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"xmlrpc-c","fixed_in":["1.33.14-12ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:26.04:LTS","package":"swish-e","fixed_in":["2.4.7-7.1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"91.7.0-3.el8_5.alma"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"91.7.0-2.el8_5.alma"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"91.7.0-2.el8_5.alma.plus"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-8.el8_6.2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-8.el8_6.2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xmlrpc-c-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xmlrpc-c-client++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xmlrpc-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw32-expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw64-expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Azure Linux:2","package":"ogdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.0-9"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"ogdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4.el8.tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4.el8.tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4.el8.tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4.el8.tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4.el8.tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4.el8.tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-13.el6_8.tuxcare.els1"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-13.el6_8.tuxcare.els1"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-7ubuntu0.16.04.5+tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libexpat1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-7ubuntu0.16.04.5+tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libexpat1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-7ubuntu0.16.04.5+tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-13.el6_8.tuxcare.els1"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-13.el6_8.tuxcare.els1"}]}],"bundled":13},{"source":"osv","ecosystem":"Debian:12","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2-4","1.2-4.1","1.2-4.1~exp1","1.2-4.2"]},{"source":"osv","ecosystem":"Debian:9","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-2+deb9u5"}]}],"versions":["2.2.0-2","2.2.0-2+deb9u1","2.2.0-2+deb9u2","2.2.0-2+deb9u3","2.2.0-2+deb9u4"],"bundled":5},{"source":"osv","ecosystem":"Debian:10","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-2+deb10u3"}]}],"versions":["2.2.6-2","2.2.6-2+deb10u1","2.2.6-2+deb10u2"],"bundled":5},{"source":"osv","ecosystem":"Debian:11","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-2+deb11u2"}]}],"versions":["2.2.10-2","2.2.10-2+deb11u1"],"bundled":5},{"source":"osv","ecosystem":"Julia","package":"Expat_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.8+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-1.3.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"91.8.0-1.1.mga8"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:8","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"91.8.0-1.mga8"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:8","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.77.0-1.mga8"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:8","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220324.00-1.mga8"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"91.8.1-1.1.mga8"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:8","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"91.8.1-1.mga8"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:8","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.51.06-1.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.9-6.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.9-6.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.9-6.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"79.0-8.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"79.0-8.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"79.0-8.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-8.oe2203"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"79.0-13.oe2203"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.4.0-9.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.10-12.el9_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"expat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.10-12.el9_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.10-12.el9_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.10-12.el9_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.10-12.el9_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"expat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.10-12.el9_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el8_1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el8_1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el8_1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el8_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el8_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el8_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el8_4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el8_4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el8_4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el8_5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el8_5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el8_5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el7_9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el7_9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el7_9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el7_9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el7_9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el7_9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el8_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el8_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el8_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el8_5"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el8_5"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el8_5"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el8_1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el8_1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el8_1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el7_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el7_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el7_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el7_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el7_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el7_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el8_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el8_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el8_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-4.el8_5.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-4.el8_5.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"expat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-4.el8_5.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-4.el8_5.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-4.el8_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-4.el8_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"expat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-4.el8_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-4.el8_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.10-202203211649_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.10-202203211649_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-3.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-3.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"expat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-3.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-3.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-14.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-3.el8_2.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-3.el8_2.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"expat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-3.el8_2.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-3.el8_2.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.22-20220330.1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.22-20220330.1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-14.el6_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-14.el6_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-14.el6_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-apps-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-client++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"xmlrpc-c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-apps-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-client++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"xmlrpc-c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-apps-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-client++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-client++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"xmlrpc-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-apps-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-client++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"xmlrpc-c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-apps-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-client++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-client++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xmlrpc-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-apps-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-client++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"xmlrpc-c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-apps-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-client++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-client++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"xmlrpc-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw-expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.8-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw32-expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.8-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw32-expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.8-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw64-expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.8-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw64-expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.8-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-3.el8_5"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:91.7.0-2.el8_5"}]}],"bundled":11},{"source":"osv","ecosystem":"Rocky Linux:8","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-4.el8_5.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.51.0-5.el8_5.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-88.42.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-88.42.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150400.3.6.9"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150400.3.6.9"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4ubuntu1.4+esm4"}]}],"versions":["2.1.0-4","2.1.0-4ubuntu1","2.1.0-4ubuntu1.1","2.1.0-4ubuntu1.2","2.1.0-4ubuntu1.3","2.1.0-4ubuntu1.4","2.1.0-4ubuntu1.4+esm1","2.1.0-4ubuntu1.4+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"coin3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4~abc9f50-4ubuntu2+esm2"}]}],"versions":["3.1.4~abc9f50-3","3.1.4~abc9f50-4","3.1.4~abc9f50-4ubuntu2","3.1.4~abc9f50-4ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.06-0ubuntu1+esm1"}]}],"versions":["1.16.33-3.2ubuntu3","1.33.06-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-7ubuntu0.16.04.5+esm2"}]}],"versions":["2.1.0-7","2.1.0-7ubuntu0.16.04.1","2.1.0-7ubuntu0.16.04.2","2.1.0-7ubuntu0.16.04.3","2.1.0-7ubuntu0.16.04.4","2.1.0-7ubuntu0.16.04.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"coin3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2"}]}],"versions":["3.1.4~abc9f50+dfsg1-1","3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"insighttoolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.1+git20120521-6ubuntu0.1~esm1"}]}],"versions":["3.20.1+git20120521-6","3.20.1+git20120521-6build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-3ubuntu0.16.04.1~esm2"}]}],"versions":["1.2-3build3","1.2-3ubuntu0.16.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4ubuntu0.1~esm1"}]}],"versions":["2.4.7-4","2.4.7-4build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ayttm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-3ubuntu0.1~esm1"}]}],"versions":["0.6.3-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cableswig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.0+git20150808-2ubuntu0.1~esm1"}]}],"versions":["0.1.0+git20150808-1","0.1.0+git20150808-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.1-1ubuntu3","4.8.1-1ubuntu4","4.8.2-3.1ubuntu1","4.9.0-3ubuntu2","4.9.0-4ubuntu1","4.9.0-4ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds1-5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.14-1ubuntu1+esm1"}]}],"versions":["1.33.14-0.2ubuntu3","1.33.14-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3ubuntu0.4"}]}],"versions":["2.2.3-1","2.2.3-2","2.2.5-0ubuntu2","2.2.5-3","2.2.5-3ubuntu0.1","2.2.5-3ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"coin3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1"}]}],"versions":["3.1.4~abc9f50+dfsg1-2","3.1.4~abc9f50+dfsg2-1","3.1.4~abc9f50+dfsg3-1","3.1.4~abc9f50+dfsg3-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-4ubuntu0.18.04.1~esm1"}]}],"versions":["1.2-4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds1-5build1","0.13+ds1-6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-5ubuntu1+esm1"}]}],"versions":["2.4.7-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.14-8ubuntu0.18.04.1~esm1"}]}],"versions":["1.33.14-7","1.33.14-8","1.33.14-8build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.9-1ubuntu0.2"}]}],"versions":["2.2.7-2","2.2.9-1","2.2.9-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-4ubuntu0.20.04.1~esm1"}]}],"versions":["1.2-4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds1-6","0.13+ds2-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-6ubuntu0.1~esm1"}]}],"versions":["2.4.7-6build1","2.4.7-6build2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wbxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.7-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.14-8ubuntu0.20.04.1~esm1"}]}],"versions":["1.33.14-8build1","1.33.14-8build2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1snap1-0ubuntu1"}]}],"versions":["93.0+build1-0ubuntu3","94.0+build3-0ubuntu1","94.0.2+build1-0ubuntu1","94.0.2+build2-0ubuntu1","95.0+build1-0ubuntu1","95.0.1+build2-0ubuntu1","95.0.2+build1-0ubuntu1","96.0+build2-0ubuntu1","96.0.1+build1-0ubuntu1","96.0.2+build1-0ubuntu1","96.0.3+build1-0ubuntu1","97.0+build1-0ubuntu1","97.0+build2-0ubuntu1","97.0.1+build1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds2-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1","1:102.15.1+build1-0ubuntu0.22.04.1","1:115.3.1+build1-0ubuntu0.22.04.2","1:115.4.1+build1-0ubuntu0.22.04.1","1:115.5.0+build1-0ubuntu0.22.04.1","1:115.6.0+build2-0ubuntu0.22.04.1","1:115.8.1+build1-0ubuntu0.22.04.1","1:115.9.0+build1-0ubuntu0.22.04.1","1:115.10.1+build1-0ubuntu0.22.04.1","1:115.11.0+build2-0ubuntu0.22.04.1","1:115.12.0+build3-0ubuntu0.22.04.1","1:115.13.0+build5-0ubuntu0.22.04.1","1:115.15.0+build1-0ubuntu0.22.04.1","1:115.16.0+build2-0ubuntu0.22.04.1","1:115.18.0+build1-0ubuntu0.22.04.1","1:128.12.0+build1-0ubuntu0.22.04.1","1:140.7.1+build1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-4ubuntu0.22.04.1~esm1"}]}],"versions":["1.2-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-6.1ubuntu0.1~esm1"}]}],"versions":["2.4.7-6build3","2.4.7-6.1","2.4.7-6.1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.14-10ubuntu0.1~esm1"}]}],"versions":["1.33.14-9","1.33.14-10"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-4.1ubuntu1"}]}],"versions":["1.2-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds2-1","0.13+ds2-1build1","0.13+ds2-1build2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:115.3.1+build1-0ubuntu1","1:115.4.1+build1-0ubuntu1","1:115.4.3+build1-0ubuntu1","1:115.5.0+build1-0ubuntu1","1:115.5.1+build1-0ubuntu1","1:115.5.2+build2-0ubuntu1","1:115.6.0+build1-0ubuntu1","1:115.6.0+build2-0ubuntu1","1:115.6.1+build1-0ubuntu1","1:115.8.0+build1-0ubuntu1","1:115.8.1+build1+snap2","1:115.8.1+build1+snap3","2:1snap1-0ubuntu1","2:1snap1-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-6.2ubuntu0.1~esm1"}]}],"versions":["2.4.7-6.2","2.4.7-6.2build1","2.4.7-6.2build2","2.4.7-6.2build3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.14-12ubuntu0.1~esm1"}]}],"versions":["1.33.14-11","1.33.14-11.1","1.33.14-12","1.33.14-12build1","1.33.14-12build2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds2-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.7-6.3","2.4.7-6.3build1","2.4.7-7"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1snap1-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds2-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.7-7.1","2.4.7-7.2","2.4.7-7.2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1snap1-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds2-2","0.13+ds2-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1snap1-0ubuntu3","2:1snap1-0ubuntu4","2:1snap1-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-7.1ubuntu0.1~esm1"}]}],"versions":["2.4.7-7","2.4.7-7.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4ubuntu1.4+esm4"}]}],"versions":["2.1.0-4","2.1.0-4ubuntu1","2.1.0-4ubuntu1.1","2.1.0-4ubuntu1.2","2.1.0-4ubuntu1.3","2.1.0-4ubuntu1.4","2.1.0-4ubuntu1.4+esm1","2.1.0-4ubuntu1.4+esm2"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-7ubuntu0.16.04.5+esm2"}]}],"versions":["2.1.0-7","2.1.0-7ubuntu0.16.04.1","2.1.0-7ubuntu0.16.04.2","2.1.0-7ubuntu0.16.04.3","2.1.0-7ubuntu0.16.04.4","2.1.0-7ubuntu0.16.04.5"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3ubuntu0.4"}]}],"versions":["2.2.3-1","2.2.3-2","2.2.5-0ubuntu2","2.2.5-3","2.2.5-3ubuntu0.1","2.2.5-3ubuntu0.2"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.9-1ubuntu0.2"}]}],"versions":["2.2.7-2","2.2.9-1","2.2.9-1build1"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-3ubuntu0.16.04.1~esm2"}]}],"versions":["1.2-3build3","1.2-3ubuntu0.16.04.1~esm1"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-4ubuntu0.18.04.1~esm1"}]}],"versions":["1.2-4"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-4ubuntu0.20.04.1~esm1"}]}],"versions":["1.2-4"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-4ubuntu0.22.04.1~esm1"}]}],"versions":["1.2-4"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"insighttoolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.1+git20120521-6ubuntu0.1~esm1"}]}],"versions":["3.20.1+git20120521-6","3.20.1+git20120521-6build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4ubuntu0.1~esm1"}]}],"versions":["2.4.7-4","2.4.7-4build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-5ubuntu1+esm1"}]}],"versions":["2.4.7-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-6ubuntu0.1~esm1"}]}],"versions":["2.4.7-6build1","2.4.7-6build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-6.1ubuntu0.1~esm1"}]}],"versions":["2.4.7-6build3","2.4.7-6.1","2.4.7-6.1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-6.2ubuntu0.1~esm1"}]}],"versions":["2.4.7-6.2","2.4.7-6.2build1","2.4.7-6.2build2","2.4.7-6.2build3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-7.1ubuntu0.1~esm1"}]}],"versions":["2.4.7-7","2.4.7-7.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"coin3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4~abc9f50-4ubuntu2+esm2"}]}],"versions":["3.1.4~abc9f50-3","3.1.4~abc9f50-4","3.1.4~abc9f50-4ubuntu2","3.1.4~abc9f50-4ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"coin3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2"}]}],"versions":["3.1.4~abc9f50+dfsg1-1","3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"coin3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1"}]}],"versions":["3.1.4~abc9f50+dfsg1-2","3.1.4~abc9f50+dfsg2-1","3.1.4~abc9f50+dfsg3-1","3.1.4~abc9f50+dfsg3-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.06-0ubuntu1+esm1"}]}],"versions":["1.16.33-3.2ubuntu3","1.33.06-0ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.14-1ubuntu1+esm1"}]}],"versions":["1.33.14-0.2ubuntu3","1.33.14-1ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.14-8ubuntu0.18.04.1~esm1"}]}],"versions":["1.33.14-7","1.33.14-8","1.33.14-8build1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.14-8ubuntu0.20.04.1~esm1"}]}],"versions":["1.33.14-8build1","1.33.14-8build2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.14-10ubuntu0.1~esm1"}]}],"versions":["1.33.14-9","1.33.14-10"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.14-12ubuntu0.1~esm1"}]}],"versions":["1.33.14-11","1.33.14-11.1","1.33.14-12","1.33.14-12build1","1.33.14-12build2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ayttm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-3ubuntu0.1~esm1"}]}],"versions":["0.6.3-3build1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cableswig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.0+git20150808-2ubuntu0.1~esm1"}]}],"versions":["0.1.0+git20150808-1","0.1.0+git20150808-2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-1.1"}]}],"bundled":5}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"libexpat_project","product":"libexpat"},{"vendor":"oracle","product":"http_server"},{"vendor":"oracle","product":"zfs_storage_appliance_kit"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"sinema_remote_connect_server"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://github.com/libexpat/libexpat/pull/562","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"http://www.openwall.com/lists/oss-security/2022/02/19/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://www.debian.org/security/2022/dsa-5085","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20220303-0008/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","web"]},{"url":"https://security.gentoo.org/glsa/202209-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25235","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM"},{"url":"https://security.netapp.com/advisory/ntap-20220303-0008"},{"url":"https://github.com/advisories/GHSA-8mw4-grgw-m3fp"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-25235","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2022-25235","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-25236","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-25315","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-26381","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-26383","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-26384","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-26386","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-26387","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-26485","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-26486","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-0566","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0951","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45960","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-46143","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22822","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22823","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22824","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22825","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22826","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22827","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23852","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25235","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25236","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25315","tags":["report"]},{"url":"https://bugzilla.redhat.com/2044451","tags":["report"]},{"url":"https://bugzilla.redhat.com/2044455","tags":["report"]},{"url":"https://bugzilla.redhat.com/2044457","tags":["report"]},{"url":"https://bugzilla.redhat.com/2044464","tags":["report"]},{"url":"https://bugzilla.redhat.com/2044467","tags":["report"]},{"url":"https://bugzilla.redhat.com/2044479","tags":["report"]},{"url":"https://bugzilla.redhat.com/2044484","tags":["report"]},{"url":"https://bugzilla.redhat.com/2044488","tags":["report"]},{"url":"https://bugzilla.redhat.com/2044613","tags":["report"]},{"url":"https://bugzilla.redhat.com/2056363","tags":["report"]},{"url":"https://bugzilla.redhat.com/2056366","tags":["report"]},{"url":"https://bugzilla.redhat.com/2056370","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-0951.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7811","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23990","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25313","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25314","tags":["report"]},{"url":"https://bugzilla.redhat.com/2048356","tags":["report"]},{"url":"https://bugzilla.redhat.com/2056350","tags":["report"]},{"url":"https://bugzilla.redhat.com/2056354","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7811.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-25235","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1660757175.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2022-1660758476.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1660759632.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1660760528","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2022-1660762248.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25235.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-25235","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0081.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30070","tags":["report"]},{"url":"https://seclists.org/oss-sec/2022/q1/150","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5288-1","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0156.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30247","tags":["report"]},{"url":"https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_77.html","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-14/","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0157.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30250","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-15/","tags":["advisory"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/91.8.0/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/91.8.1/releasenotes/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2022-0183.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30351","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1643","tags":["web","advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25236","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25314","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25313","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25315","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1588","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2057","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2085","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1815","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45960","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2022:4046","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.0_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_4046.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044455","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-46143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46143","tags":["advisory"]},{"url":"https://github.com/libexpat/libexpat/issues/532","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044457","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22822","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22822","tags":["advisory"]},{"url":"https://github.com/libexpat/libexpat/pull/539","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044464","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22823","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22823","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22824","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044479","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22825","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22825","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044484","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22826","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22826","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044488","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22827","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22827","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044613","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23852","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23852","tags":["advisory"]},{"url":"https://github.com/libexpat/libexpat/pull/550","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048356","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23990","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23990","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056366","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25235","tags":["advisory","report"]},{"url":"https://blog.hartwork.org/posts/expat-2-4-5-released/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25315","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0815","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062223","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062224","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0815.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25236","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26381","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26381","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26381","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-11/#CVE-2022-26381","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-12/#CVE-2022-26381","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26383","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26383","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26383","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26384","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26384","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26384","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-11/#CVE-2022-26384","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-12/#CVE-2022-26384","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26386","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26386","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26386","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-11/#CVE-2022-26386","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-12/#CVE-2022-26386","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26387","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26387","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26387","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26485","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26485","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26485","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/#CVE-2022-26485","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26486","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26486","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26486","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/#CVE-2022-26486","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0816","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0816.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0817","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0817.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0818","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0818.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0824","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030190","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0824.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0843","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055591","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0843.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0566","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0566","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0566","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-07/#CVE-2022-0566","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0845","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0845.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0847","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0847.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0850","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0850.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0853","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0853.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044451","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0951.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45960","tags":["advisory"]},{"url":"https://github.com/libexpat/libexpat/issues/531","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1012","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1012.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1053","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057048","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1053.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1068","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1068.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1069","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1069.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1070","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1070.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1263","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2042404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048409","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062202","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1263.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-0920","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-0920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-0920","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cbcf01128d0a92e131bd09f1688fe032480b65ca","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4028","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4028","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4028","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bc0bdc5afaa74","tags":["article"]},{"url":"https://lkml.org/lkml/2021/10/4/697","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4083","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4083","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4083","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=054aa8d439b9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4155","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=983d8e60f50806f90534cc5373d0ce867e5aaf79","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45417","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0330","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0330","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0330","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/25/12","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0778","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0778","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20220315.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22942","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22942","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22942","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24407","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24407","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24407","tags":["advisory"]},{"url":"https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1309","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1309.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1539","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1539.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1540","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1540.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1643.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1644","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1644.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056354","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7811.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25313","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25314","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:0818","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:0845","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:0951","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:1643","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220698-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1196025","tags":["report"]},{"url":"https://bugzilla.suse.com/1196026","tags":["report"]},{"url":"https://bugzilla.suse.com/1196168","tags":["report"]},{"url":"https://bugzilla.suse.com/1196169","tags":["report"]},{"url":"https://bugzilla.suse.com/1196171","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-25235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-25236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-25313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-25314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-25315","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220713-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214903-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222294-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1196784","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-25235","tags":["report"]},{"url":"https://github.com/libexpat/libexpat/pull/562/commits/367ae600b48d74261bbc339b17e9318424049791","tags":["report"]},{"url":"https://github.com/libexpat/libexpat/pull/562/commits/97cfdc3fa7dca759880d81e371901f4620279106","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5455-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8240-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8235-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8313-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8314-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8316-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-45960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-46143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-22822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-22823","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-22824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-22825","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-22826","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-22827","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-25236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2012-1148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0718","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15903","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8241-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6H3EOIG3ASUYP7RIHFPOJG3PFJYN54WT/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-25235","description":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","status":"published","published":"2022-02-16T00:40:20Z","modified":"2026-10-14T16:01:51.418Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T14:34:28.707644Z"}],"euvd":[{"id":"EUVD-2022-29933","description":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","status":"published","published":"2022-02-16T00:40:20Z","modified":"2026-10-14T16:01:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T17:27:14.734034Z"}],"ghsa":[{"id":"GHSA-8mw4-grgw-m3fp","title":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...","description":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","status":"published","published":"2022-02-17T00:00:35Z","modified":"2026-10-14T18:31:27Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T15:13:26.734116Z"}],"nvd":[{"id":"CVE-2022-25235","description":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","status":"published","published":"2022-02-16T01:15:07.607Z","modified":"2026-10-14T16:17:28.01Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T14:07:12.155838Z"}],"osv":[{"id":"ALPINE-CVE-2022-25235","description":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","status":"published","published":"2022-02-16T01:15:07.607Z","modified":"2026-11-03T07:18:33.129113212Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-43681","title":"CVE-2022-25235 affecting package ogdi 4.1.0-9","description":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","status":"published","published":"2022-02-16T01:15:07Z","modified":"2026-04-21T04:31:06.416263Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44607","title":"CVE-2022-25235 affecting package ogdi 4.1.1-3","description":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","status":"published","published":"2022-02-16T01:15:07Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"AZL-8603","title":"CVE-2022-25235 affecting package expat for versions less than 2.4.8-1","description":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","status":"published","published":"2022-02-16T01:15:07Z","modified":"2026-04-21T04:34:52.636487Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:10.677811Z"},{"id":"BELL-CVE-2022-25235","title":"CVE-2022-25235 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:21.55467Z","modified":"2026-01-26T09:49:54.779486Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-25235","description":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","status":"published","published":"2022-02-16T00:40:20Z","modified":"2026-10-28T02:31:10.601170943Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:24.428403Z"},{"id":"DEBIAN-CVE-2022-25235","description":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","status":"published","published":"2022-02-16T01:15:07.607Z","modified":"2026-11-03T08:00:11.530358329Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:25:15.646766Z"},{"id":"JLSEC-2025-52","title":"`xmltok_impl.c` in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...","description":"`xmltok_impl.c` in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","status":"published","published":"2025-10-14T15:35:41.198Z","modified":"2026-07-23T22:30:29.019657528Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2022-1554","title":"expat security update","description":"An XML parser library.\r\n\r\nSecurity Fix(es):\r\n\r\nxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.(CVE-2022-25235)\r\n\r\nxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.(CVE-2022-25236)\r\n\r\nIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.(CVE-2022-25314)\r\n\r\nIn Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.(CVE-2022-25313)\r\n\r\nIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.(CVE-2022-25315)","status":"published","published":"2022-03-07T11:04:50Z","modified":"2026-08-18T01:16:26.053129759Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1588","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\r\n\r\nxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.(CVE-2022-25235)\r\n\r\nxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.(CVE-2022-25236)\r\n\r\nIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.(CVE-2022-25315)","status":"published","published":"2022-03-22T11:04:52Z","modified":"2026-08-18T01:15:48.749404454Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-2057","title":"expat security update","description":"This package provides with static libraries and  header files for developing with expat.\r\n\r\nSecurity Fix(es):\r\n\r\nxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.(CVE-2022-25235)\r\n\r\nxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.(CVE-2022-25236)\r\n\r\nIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.(CVE-2022-25314)\r\n\r\nIn Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.(CVE-2022-25313)\r\n\r\nIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.(CVE-2022-25315)","status":"published","published":"2022-11-11T11:05:22Z","modified":"2026-08-18T01:17:21.57878549Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2022-2085","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\r\n\r\nxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.(CVE-2022-25235)\r\n\r\nxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.(CVE-2022-25236)\r\n\r\nIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.(CVE-2022-25315)","status":"published","published":"2022-11-11T11:05:24Z","modified":"2026-08-18T01:16:56.127984039Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2024-1815","title":"mozjs78 security update","description":"Security Fix(es):\r\n\r\nIn Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).(CVE-2021-45960)\r\n\r\nxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.(CVE-2022-25235)","status":"published","published":"2024-07-05T11:07:17Z","modified":"2026-08-18T01:18:29.018392999Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"RHBA-2022:4046","title":"Red Hat Bug Fix Advisory: new packages: expat","status":"published","published":"2025-02-04T10:01:27Z","modified":"2026-10-15T10:02:11Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2022:0815","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-17T01:15:56Z","modified":"2026-10-15T10:02:17Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0816","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-17T01:16:05Z","modified":"2026-10-15T10:02:18Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0817","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-17T01:16:20Z","modified":"2026-10-15T10:02:18Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0818","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-17T01:16:12Z","modified":"2026-10-15T10:02:19Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0824","title":"Red Hat Security Advisory: firefox security and bug fix update","status":"published","published":"2024-09-17T01:15:47Z","modified":"2026-10-15T10:02:19Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0843","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-17T01:16:35Z","modified":"2026-10-15T10:02:20Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0845","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-17T01:16:51Z","modified":"2026-10-15T10:02:21Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0847","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-17T01:17:00Z","modified":"2026-10-15T10:02:22Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0850","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-17T01:16:43Z","modified":"2026-10-15T10:02:22Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0853","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-17T01:16:27Z","modified":"2026-10-15T10:02:23Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0951","title":"Red Hat Security Advisory: expat security update","status":"published","published":"2024-09-17T01:16:00Z","modified":"2026-10-15T10:02:24Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1012","title":"Red Hat Security Advisory: expat security update","status":"published","published":"2024-09-17T01:16:09Z","modified":"2026-10-15T10:02:25Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1053","title":"Red Hat Security Advisory: Red Hat Virtualization Host security and enhancement update [ovirt-4.4.10] Async #2","status":"published","published":"2024-09-17T01:16:17Z","modified":"2026-10-15T10:02:25Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1068","title":"Red Hat Security Advisory: expat security update","status":"published","published":"2024-09-17T01:16:32Z","modified":"2026-10-15T10:02:26Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1069","title":"Red Hat Security Advisory: expat security update","status":"published","published":"2024-09-17T01:16:40Z","modified":"2026-10-15T10:02:27Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1070","title":"Red Hat Security Advisory: expat security update","status":"published","published":"2024-09-17T01:16:25Z","modified":"2026-10-15T10:02:28Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1263","title":"Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.22","status":"published","published":"2024-09-30T16:27:48Z","modified":"2026-10-15T10:02:28Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1309","title":"Red Hat Security Advisory: expat security update","status":"published","published":"2024-09-17T01:16:57Z","modified":"2026-10-15T10:02:29Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1539","title":"Red Hat Security Advisory: xmlrpc-c security update","status":"published","published":"2024-09-13T23:17:08Z","modified":"2026-10-09T10:03:55Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1540","title":"Red Hat Security Advisory: xmlrpc-c security update","status":"published","published":"2024-09-13T23:17:17Z","modified":"2026-10-09T10:03:56Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:1643","title":"Red Hat Security Advisory: xmlrpc-c security update","status":"published","published":"2024-09-13T23:17:09Z","modified":"2026-10-09T10:03:58Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:1644","title":"Red Hat Security Advisory: xmlrpc-c security update","status":"published","published":"2024-09-13T23:17:01Z","modified":"2026-10-09T10:03:58Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:7811","title":"Red Hat Security Advisory: mingw-expat security update","status":"published","published":"2024-09-17T01:17:12Z","modified":"2026-10-15T10:03:16Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:0818","title":"Critical: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 91.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Use-after-free in XSLT parameter processing (CVE-2022-26485)\n\n* Mozilla: Use-after-free in WebGPU IPC Framework (CVE-2022-26486)\n\n* expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)\n\n* expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution (CVE-2022-25236)\n\n* expat: Integer overflow in storeRawNames() (CVE-2022-25315)\n\n* Mozilla: Use-after-free in text reflows (CVE-2022-26381)\n\n* Mozilla: Browser window spoof using fullscreen mode (CVE-2022-26383)\n\n* Mozilla: iframe allow-scripts sandbox bypass (CVE-2022-26384)\n\n* Mozilla: Time-of-check time-of-use bug when verifying add-on signatures (CVE-2022-26387)\n\n* Mozilla: Temporary files downloaded to /tmp and accessible by other local users (CVE-2022-26386)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-10T14:36:51Z","modified":"2026-02-04T23:45:05.036667Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:0845","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 91.7.0.\n\nSecurity Fix(es):\n\n* Mozilla: Use-after-free in XSLT parameter processing (CVE-2022-26485)\n\n* Mozilla: Use-after-free in WebGPU IPC Framework (CVE-2022-26486)\n\n* expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)\n\n* expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution (CVE-2022-25236)\n\n* expat: Integer overflow in storeRawNames() (CVE-2022-25315)\n\n* Mozilla: Use-after-free in text reflows (CVE-2022-26381)\n\n* Mozilla: Browser window spoof using fullscreen mode (CVE-2022-26383)\n\n* Mozilla: iframe allow-scripts sandbox bypass (CVE-2022-26384)\n\n* Mozilla: Time-of-check time-of-use bug when verifying add-on signatures (CVE-2022-26387)\n\n* thunderbird: Crafted email could trigger an out-of-bounds write (CVE-2022-0566)\n\n* Mozilla: Temporary files downloaded to /tmp and accessible by other local users (CVE-2022-26386)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-14T09:49:10Z","modified":"2026-02-04T11:15:10.449754Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:0951","title":"Important: expat security update","description":"Expat is a C library for parsing XML documents.\n\nSecurity Fix(es):\n\n* expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)\n\n* expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution (CVE-2022-25236)\n\n* expat: Integer overflow in storeRawNames() (CVE-2022-25315)\n\n* expat: Large number of prefixed XML attributes on a single tag can crash libexpat (CVE-2021-45960)\n\n* expat: Integer overflow in doProlog in xmlparse.c (CVE-2021-46143)\n\n* expat: Integer overflow in addBinding in xmlparse.c (CVE-2022-22822)\n\n* expat: Integer overflow in build_model in xmlparse.c (CVE-2022-22823)\n\n* expat: Integer overflow in defineAttribute in xmlparse.c (CVE-2022-22824)\n\n* expat: Integer overflow in lookup in xmlparse.c (CVE-2022-22825)\n\n* expat: Integer overflow in nextScaffoldPart in xmlparse.c (CVE-2022-22826)\n\n* expat: Integer overflow in storeAtts in xmlparse.c (CVE-2022-22827)\n\n* expat: Integer overflow in function XML_GetBuffer (CVE-2022-23852)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-16T15:13:06Z","modified":"2026-02-04T07:40:22.968789Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:1643","title":"Important: xmlrpc-c security update","description":"XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.\n\nSecurity Fix(es):\n\n* expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-04-28T14:07:17Z","modified":"2026-02-04T11:15:12.127742Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-25235","description":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","status":"published","published":"2022-02-15T00:00:00Z","modified":"2026-10-17T12:56:02.439199216Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"ALSA-2022:0818","title":"Critical: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 91.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Use-after-free in XSLT parameter processing (CVE-2022-26485)\n\n* Mozilla: Use-after-free in WebGPU IPC Framework (CVE-2022-26486)\n\n* expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)\n\n* expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution (CVE-2022-25236)\n\n* expat: Integer overflow in storeRawNames() (CVE-2022-25315)\n\n* Mozilla: Use-after-free in text reflows (CVE-2022-26381)\n\n* Mozilla: Browser window spoof using fullscreen mode (CVE-2022-26383)\n\n* Mozilla: iframe allow-scripts sandbox bypass (CVE-2022-26384)\n\n* Mozilla: Time-of-check time-of-use bug when verifying add-on signatures (CVE-2022-26387)\n\n* Mozilla: Temporary files downloaded to /tmp and accessible by other local users (CVE-2022-26386)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-10T14:36:51Z","modified":"2026-10-29T11:01:11.794450173Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2022:0845","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 91.7.0.\n\nSecurity Fix(es):\n\n* Mozilla: Use-after-free in XSLT parameter processing (CVE-2022-26485)\n\n* Mozilla: Use-after-free in WebGPU IPC Framework (CVE-2022-26486)\n\n* expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)\n\n* expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution (CVE-2022-25236)\n\n* expat: Integer overflow in storeRawNames() (CVE-2022-25315)\n\n* Mozilla: Use-after-free in text reflows (CVE-2022-26381)\n\n* Mozilla: Browser window spoof using fullscreen mode (CVE-2022-26383)\n\n* Mozilla: iframe allow-scripts sandbox bypass (CVE-2022-26384)\n\n* Mozilla: Time-of-check time-of-use bug when verifying add-on signatures (CVE-2022-26387)\n\n* thunderbird: Crafted email could trigger an out-of-bounds write (CVE-2022-0566)\n\n* Mozilla: Temporary files downloaded to /tmp and accessible by other local users (CVE-2022-26386)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-14T09:49:10Z","modified":"2026-10-29T11:01:14.240360201Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2022:0951","title":"Important: expat security update","description":"Expat is a C library for parsing XML documents.\nSecurity Fix(es):\n* expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)\n* expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution (CVE-2022-25236)\n* expat: Integer overflow in storeRawNames() (CVE-2022-25315)\n* expat: Large number of prefixed XML attributes on a single tag can crash libexpat (CVE-2021-45960)\n* expat: Integer overflow in doProlog in xmlparse.c (CVE-2021-46143)\n* expat: Integer overflow in addBinding in xmlparse.c (CVE-2022-22822)\n* expat: Integer overflow in build_model in xmlparse.c (CVE-2022-22823)\n* expat: Integer overflow in defineAttribute in xmlparse.c (CVE-2022-22824)\n* expat: Integer overflow in lookup in xmlparse.c (CVE-2022-22825)\n* expat: Integer overflow in nextScaffoldPart in xmlparse.c (CVE-2022-22826)\n* expat: Integer overflow in storeAtts in xmlparse.c (CVE-2022-22827)\n* expat: Integer overflow in function XML_GetBuffer (CVE-2022-23852)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-16T00:00:00Z","modified":"2026-10-29T11:01:15.158791294Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2022:1643","title":"Important: xmlrpc-c security update","description":"XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.\n\nSecurity Fix(es):\n\n* expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-04-28T14:07:17Z","modified":"2026-10-29T11:01:03.885529315Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2022:7811","title":"Important: mingw-expat security update","description":"Expat is a C library for parsing XML documents. The mingw-expat packages provide a port of the Expat library for MinGW. \n\nThe following packages have been upgraded to a later upstream version: mingw-expat (2.4.8). (BZ#2057023, BZ#2057037, BZ#2057127)\n\nSecurity Fix(es):\n\n* expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)\n* expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution (CVE-2022-25236)\n* expat: Integer overflow in storeRawNames() (CVE-2022-25315)\n* expat: Stack exhaustion in doctype parsing (CVE-2022-25313)\n* expat: Integer overflow in copyString() (CVE-2022-25314)\n* expat: Integer overflow in the doProlog function (CVE-2022-23990)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:52.78748159Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2022-1660757175","title":"Fixed 15 CVEs in expat","description":"- CVE-2022-25236: Fix insertion of namespace-separator characters into\n  namespace URIs\n- CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to\n  arbitrary code execution\n- CVE-2022-25315: Fix integer overflow in storeRawNames()\n- CVE-2022-22822: Fix integer overflow in addBinding()\n- CVE-2022-22823: Fix integer overflow in build_model()\n- CVE-2022-22824: Fix integer overflow in defineAttribute()\n- CVE-2022-22825: Fix integer overflow in lookup()\n- CVE-2022-22826: Fix integer overflow in nextScaffoldPart()\n- CVE-2022-22827: Fix integer overflow in storeAtts()\n- CVE-2022-23852: Fix integer overflow in XML_GetBuffer()\n- CVE-2021-46143: Fix integer overflow on m_groupSize in doProlog()\n- CVE-2021-45960: Fix troublesome left shifts in storeAtts()\n- CVE-2022-23990: Fix integer overflow in doProlog()\n- CVE-2022-25313: Fix stack exhaustion in build_model()\n- CVE-2022-25314: Fix integer overflow in copyString()","status":"published","published":"2022-08-17T17:26:15Z","modified":"2026-10-21T10:47:56.534771217Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1660758476","title":"Fixed 15 CVEs in expat","description":"- CVE-2022-25236: Fix insertion of namespace-separator characters into\n  namespace URIs\n- CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to\n  arbitrary code execution\n- CVE-2022-25315: Fix integer overflow in storeRawNames()\n- CVE-2022-22822: Fix integer overflow in addBinding()\n- CVE-2022-22823: Fix integer overflow in build_model()\n- CVE-2022-22824: Fix integer overflow in defineAttribute()\n- CVE-2022-22825: Fix integer overflow in lookup()\n- CVE-2022-22826: Fix integer overflow in nextScaffoldPart()\n- CVE-2022-22827: Fix integer overflow in storeAtts()\n- CVE-2022-23852: Fix integer overflow in XML_GetBuffer()\n- CVE-2021-46143: Fix integer overflow on m_groupSize in doProlog()\n- CVE-2021-45960: Fix troublesome left shifts in storeAtts()\n- CVE-2022-23990: Fix integer overflow in doProlog()\n- CVE-2022-25313: Fix stack exhaustion in build_model()\n- CVE-2022-25314: Fix integer overflow in copyString()","status":"published","published":"2022-08-17T17:47:56Z","modified":"2026-10-21T10:47:51.665937197Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1660759632","title":"Fixed 13 CVEs in expat","description":"- CVE-2022-25236: Fix insertion of namespace-separator characters into\n  namespace URIs\n- CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to\n  arbitrary code execution\n- CVE-2022-25315: Fix integer overflow in storeRawNames()\n- CVE-2022-22822: Fix integer overflow in addBinding()\n- CVE-2022-22823: Fix integer overflow in build_model()\n- CVE-2022-22824: Fix integer overflow in defineAttribute()\n- CVE-2022-22825: Fix integer overflow in lookup()\n- CVE-2022-22826: Fix integer overflow in nextScaffoldPart()\n- CVE-2022-22827: Fix integer overflow in storeAtts()\n- CVE-2022-23852: Fix integer overflow in XML_GetBuffer()\n- CVE-2021-46143: Fix integer overflow on m_groupSize in doProlog()\n- CVE-2021-45960: Fix troublesome left shifts in storeAtts()\n- CVE-2022-23990: Fix integer overflow in doProlog()","status":"published","published":"2022-08-17T18:07:12Z","modified":"2026-10-21T10:48:01.406135998Z","updated_at":"2026-11-02T15:43:40.176048Z"}]},"sources_more":{"osv":22}}