{"id":"CVE-2026-45186","aliases":["ALPINE-CVE-2026-45186","ALSA-2026:22715","ALSA-2026:22721","ALSA-2026:23230","ALSA-2026:89756","ALSA-2026:89757","ALSA-2026:89758","ALSA-2026:90895","ALSA-2026:93443","AZL-86340","BELL-CVE-2026-45186","CLSA-2026-1779122132","CLSA-2026-1779129222","CLSA-2026-1779129362","CLSA-2026-1779130424","CLSA-2026-1779183482","CLSA-2026-1779183767","CLSA-2026-1779183996","CLSA-2026-1779184141","CLSA-2026-1779358911","CLSA-2026-1779358954","CLSA-2026-1779359157","CLSA-2026-1779359397","CLSA-2026-1779359429","CLSA-2026-1779361284","DEBIAN-CVE-2026-45186","EUVD-2026-28985","GHSA-r396-2q2c-pjhr","JLSEC-2026-1223","MGASA-2026-0204","OESA-2026-2430","OESA-2026-2431","OESA-2026-2432","OESA-2026-2433","OESA-2026-2500","RHSA-2026:22715","RHSA-2026:22721","RHSA-2026:23230","RHSA-2026:77236","RLSA-2026:22715","RLSA-2026:22721","RLSA-2026:23230","RLSA-2026:89756","RLSA-2026:89757","RLSA-2026:89758","RLSA-2026:90895","RLSA-2026:93443","ROOT-OS-DEBIAN-11-CVE-2026-45186","ROOT-OS-DEBIAN-12-CVE-2026-45186","ROOT-OS-DEBIAN-13-CVE-2026-45186","SUSE-SU-2026:23743-1","SUSE-SU-2026:23894-1","SUSE-SU-2026:23912-1","SUSE-SU-2026:24260-1","SUSE-SU-2026:24323-1","SUSE-SU-2026:24554-1","SUSE-SU-2026:3649-1","SUSE-SU-2026:4534-1","SUSE-SU-2026:4615-1","SUSE-SU-2026:4619-1","SUSE-SU-2026:4623-1","SUSE-SU-2026:4736-1","SUSE-SU-2026:4806-1","SUSE-SU-2026:4834-1","UBUNTU-CVE-2026-45186","USN-8790-1","openSUSE-SU-2026:10787-1","openSUSE-SU-2026:11747-1","openSUSE-SU-2026:11756-1","openSUSE-SU-2026:21945-1","openSUSE-SU-2026:22139-1"],"status":"published","title":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows...","description":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.","severity":{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00479,"percentile":0.417,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-407"],"published":"2026-05-10T06:36:16Z","modified":"2026-11-10T12:46:47Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"expat","fixed_in":["2.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"expat","fixed_in":["2.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"expat","fixed_in":["2.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"expat","fixed_in":["2.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"expat","fixed_in":["2.8.1-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"expat","fixed_in":["2.7.3-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"expat-devel","fixed_in":["2.7.3-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"expat","fixed_in":["2.5.0-2.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"expat-devel","fixed_in":["2.5.0-2.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"expat","fixed_in":["2.5.0-6.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"expat-devel","fixed_in":["2.5.0-6.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"thunderbird","fixed_in":["153.5.0-1.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"expat","fixed_in":["2.8.2-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"expat","fixed_in":["2.7.5-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"expat","fixed_in":["2.7.5-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"expat","fixed_in":["2.8.1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"expat","fixed_in":["2.7.5-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"expat","fixed_in":["2.7.5-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"expat","fixed_in":["2.8.1-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"expat","fixed_in":["2.5.0-1.el9.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"expat-devel","fixed_in":["2.5.0-1.el9.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"expat-static","fixed_in":["2.5.0-1.el9.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"expat","fixed_in":["2.1.0-7ubuntu0.16.04.5+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libexpat1","fixed_in":["2.1.0-7ubuntu0.16.04.5+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libexpat1-dev","fixed_in":["2.1.0-7ubuntu0.16.04.5+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"expat","fixed_in":["2.2.5-3ubuntu0.9+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libexpat1","fixed_in":["2.2.5-3ubuntu0.9+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libexpat1-dev","fixed_in":["2.2.5-3ubuntu0.9+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"expat","fixed_in":["2.5.0-5.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"expat-devel","fixed_in":["2.5.0-5.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"expat-static","fixed_in":["2.5.0-5.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"expat","fixed_in":["2.2.9-1ubuntu0.8+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libexpat1","fixed_in":["2.2.9-1ubuntu0.8+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libexpat1-dev","fixed_in":["2.2.9-1ubuntu0.8+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"expat","fixed_in":["2.5.0-1.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"expat-devel","fixed_in":["2.5.0-1.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"expat-static","fixed_in":["2.5.0-1.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"expat","fixed_in":["2.5.0-1.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"expat-devel","fixed_in":["2.5.0-1.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"expat-static","fixed_in":["2.5.0-1.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"expat","fixed_in":["2.5.0-1.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"expat-devel","fixed_in":["2.5.0-1.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"expat-static","fixed_in":["2.5.0-1.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"expat","fixed_in":["2.1.0-15.0.7.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"expat-devel","fixed_in":["2.1.0-15.0.7.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"expat-static","fixed_in":["2.1.0-15.0.7.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"expat","fixed_in":["2.1.0-15.0.7.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"expat-devel","fixed_in":["2.1.0-15.0.7.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"expat-static","fixed_in":["2.1.0-15.0.7.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"expat","fixed_in":["2.2.6-2+deb10u7+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libexpat1","fixed_in":["2.2.6-2+deb10u7+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libexpat1-dev","fixed_in":["2.2.6-2+deb10u7+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"expat","fixed_in":["2.1.0-15.0.7.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"expat-devel","fixed_in":["2.1.0-15.0.7.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"expat-static","fixed_in":["2.1.0-15.0.7.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"expat","fixed_in":["2.0.1-13.el6_8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"expat-devel","fixed_in":["2.0.1-13.el6_8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"expat","fixed_in":["2.0.1-13.el6_8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"expat-devel","fixed_in":["2.0.1-13.el6_8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"expat","fixed_in":["2.5.0-1+deb12u4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"expat","fixed_in":["2.8.2-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"expat","fixed_in":["2.8.0-2"],"sources":["osv"]},{"ecosystem":"Julia","package":"Expat_jll","fixed_in":["2.8.1+0"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"expat","fixed_in":["2.7.5-1.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"expat","fixed_in":["2.5.0-19.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"expat","fixed_in":["2.5.0-19.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"expat","fixed_in":["2.2.9-24.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"expat","fixed_in":["2.4.1-23.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"expat","fixed_in":["2.5.0-19.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"expat-debuginfo","fixed_in":["0:2.7.3-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"expat-debugsource","fixed_in":["0:2.7.3-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"expat-devel","fixed_in":["0:2.7.3-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"expat","fixed_in":["0:2.7.3-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"expat","fixed_in":["0:2.5.0-2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"expat-debuginfo","fixed_in":["0:2.5.0-2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"expat-debugsource","fixed_in":["0:2.5.0-2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"expat-devel","fixed_in":["0:2.5.0-2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"expat-debuginfo","fixed_in":["0:2.5.0-6.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"expat-debugsource","fixed_in":["0:2.5.0-6.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"expat-devel","fixed_in":["0:2.5.0-6.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"expat","fixed_in":["0:2.5.0-6.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"expat-debuginfo","fixed_in":["0:2.5.0-6.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"expat-debugsource","fixed_in":["0:2.5.0-6.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"expat","fixed_in":["0:2.8.5-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"expat-devel","fixed_in":["0:2.8.5-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"expat-static","fixed_in":["0:2.8.5-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"expat","fixed_in":["0:2.7.3-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"expat","fixed_in":["0:2.5.0-2.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"expat","fixed_in":["0:2.5.0-6.el9_8.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"thunderbird","fixed_in":["0:153.5.0-1.el10_2"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"expat","fixed_in":["2.2.10-2+deb11u7.root.io.14","2.2.10-2+deb11u7.aikido.17","2.2.10-2+deb11u7.root.io.15","2.2.10-2+deb11u7.aikido.19","2.2.10-2+deb11u7.aikido.18","2.2.10-2+deb11u7.aikido.20","2.2.10-2+deb11u7.root.io.16","2.2.10-2+deb11u7.root.io.13"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-expat","fixed_in":["2.2.10-2+deb11u7.root.io.14","2.2.10-2+deb11u7.aikido.17","2.2.10-2+deb11u7.root.io.15","2.2.10-2+deb11u7.aikido.19","2.2.10-2+deb11u7.aikido.18","2.2.10-2+deb11u7.aikido.20","2.2.10-2+deb11u7.root.io.16","2.2.10-2+deb11u7.root.io.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"expat","fixed_in":["2.6.1-2ubuntu0.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"expat","fixed_in":["2.7.4-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.3-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.3-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-2.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-2.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-6.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-6.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-1.el8_10"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-1.el9_8"}]}],"bundled":48},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-1.el9_8"}]}],"bundled":48},{"source":"osv","ecosystem":"AlmaLinux:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-1.el10_2"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-1.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-1.el9_8.alma.1"}]}],"bundled":62},{"source":"osv","ecosystem":"Azure Linux:3","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.5.0-r0"},{"fixed":"2.7.5-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.1-r0"},{"fixed":"2.7.5-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.9-r0"},{"fixed":"2.8.1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.5.0-r0"},{"fixed":"2.7.5-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.1-r0"},{"fixed":"2.7.5-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.9-r0"},{"fixed":"2.8.1-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.el9.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.el9.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.el9.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-7ubuntu0.16.04.5+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libexpat1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-7ubuntu0.16.04.5+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libexpat1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-7ubuntu0.16.04.5+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3ubuntu0.9+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libexpat1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3ubuntu0.9+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libexpat1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3ubuntu0.9+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-5.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-5.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-5.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.9-1ubuntu0.8+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libexpat1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.9-1ubuntu0.8+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libexpat1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.9-1ubuntu0.8+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-15.0.7.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-15.0.7.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-15.0.7.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-15.0.7.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-15.0.7.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-15.0.7.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-2+deb10u7+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libexpat1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-2+deb10u7+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libexpat1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-2+deb10u7+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-15.0.7.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-15.0.7.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-15.0.7.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-13.el6_8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-13.el6_8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-13.el6_8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-13.el6_8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1+deb12u4"}]}],"versions":["2.5.0-1","2.5.0-1+deb12u1","2.5.0-1+deb12u2","2.5.0-1+deb12u3"]},{"source":"osv","ecosystem":"Debian:13","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-1~deb13u1"}]}],"versions":["2.7.1-2","2.7.2-1","2.7.3-1","2.7.3-2","2.7.4-1","2.7.5-1","2.8.0-1","2.8.0-2","2.8.1-1"]},{"source":"osv","ecosystem":"Debian:14","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-2"}]}],"versions":["2.7.1-2","2.7.2-1","2.7.3-1","2.7.3-2","2.7.4-1","2.7.5-1","2.8.0-1"]},{"source":"osv","ecosystem":"Julia","package":"Expat_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.8.1+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-19.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-19.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.9-24.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-23.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-19.oe2403sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.3-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"expat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.3-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.3-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.3-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"expat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-6.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"expat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-6.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-6.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-6.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"expat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-6.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"expat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-6.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"expat-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"expat-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.3-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-2.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-6.el9_8.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:153.5.0-1.el8_10"}]}],"bundled":41},{"source":"osv","ecosystem":"Rocky Linux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:153.5.0-1.el9_8"}]}],"bundled":48},{"source":"osv","ecosystem":"Rocky Linux:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:153.5.0-1.el10_2"}]}],"bundled":29},{"source":"osv","ecosystem":"Rocky Linux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:153.5.0-1.el10_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:153.5.0-1.el9_8"}]}],"bundled":62},{"source":"osv","ecosystem":"Root:Debian:11","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-2+deb11u7.root.io.14"},{"fixed":"2.2.10-2+deb11u7.aikido.17"},{"fixed":"2.2.10-2+deb11u7.root.io.15"},{"fixed":"2.2.10-2+deb11u7.aikido.19"},{"fixed":"2.2.10-2+deb11u7.aikido.18"},{"fixed":"2.2.10-2+deb11u7.aikido.20"},{"fixed":"2.2.10-2+deb11u7.root.io.16"},{"fixed":"2.2.10-2+deb11u7.root.io.13"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-2+deb11u7.root.io.14"},{"fixed":"2.2.10-2+deb11u7.aikido.17"},{"fixed":"2.2.10-2+deb11u7.root.io.15"},{"fixed":"2.2.10-2+deb11u7.aikido.19"},{"fixed":"2.2.10-2+deb11u7.aikido.18"},{"fixed":"2.2.10-2+deb11u7.aikido.20"},{"fixed":"2.2.10-2+deb11u7.root.io.16"},{"fixed":"2.2.10-2+deb11u7.root.io.13"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-slfo.1.1_1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-slfo.1.1_1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.4-160000.1.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.4-160000.1.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.4-160000.1.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-160000.1.1"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-160000.1.1"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-159998.1.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-slfo.1.1_1.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-150700.4.53.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-150700.4.53.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-21.55.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-21.55.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150700.3.15.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150400.3.40.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150400.3.40.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150400.3.40.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150400.3.40.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150400.3.40.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150400.3.40.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150400.3.40.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150400.3.40.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150400.3.40.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150400.3.40.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150400.3.40.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150400.3.40.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-150400.3.40.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-150400.13.9.1"}]}],"bundled":86},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-150400.13.9.1"}]}],"bundled":86},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-118.16.2"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-118.16.2"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-150400.157.16.1"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-150400.157.16.1"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-150400.157.16.1"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-150400.157.16.1"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-150400.157.16.1"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-150400.157.16.1"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-150400.157.16.1"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-150400.157.16.1"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-150400.157.16.1"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-150400.157.16.1"}]}],"bundled":85},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-150400.157.16.1"}]}],"bundled":85},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"coin3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.4~abc9f50-3","3.1.4~abc9f50-4","3.1.4~abc9f50-4ubuntu2","3.1.4~abc9f50-4ubuntu2+esm1","3.1.4~abc9f50-4ubuntu2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0-4","2.1.0-4ubuntu1","2.1.0-4ubuntu1.1","2.1.0-4ubuntu1.2","2.1.0-4ubuntu1.3","2.1.0-4ubuntu1.4","2.1.0-4ubuntu1.4+esm1","2.1.0-4ubuntu1.4+esm2","2.1.0-4ubuntu1.4+esm4","2.1.0-4ubuntu1.4+esm6","2.1.0-4ubuntu1.4+esm7","2.1.0-4ubuntu1.4+esm8","2.1.0-4ubuntu1.4+esm9","2.1.0-4ubuntu1.4+esm10","2.1.0-4ubuntu1.4+esm11","2.1.0-4ubuntu1.4+esm12","2.1.0-4ubuntu1.4+esm13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vnc4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.1.1+xorg4.3.0-37ubuntu5","4.1.1+xorg4.3.0-37ubuntu5.0.1","4.1.1+xorg4.3.0-37ubuntu5.0.2","4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-14ubuntu1","5.8.0-14ubuntu3","5.8.0-14.1ubuntu2","5.8.0-14.1ubuntu3","5.8.0-14.1ubuntu3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.33-3.2ubuntu3","1.33.06-0ubuntu1","1.33.06-0ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0-7","2.1.0-7ubuntu0.16.04.1","2.1.0-7ubuntu0.16.04.2","2.1.0-7ubuntu0.16.04.3","2.1.0-7ubuntu0.16.04.4","2.1.0-7ubuntu0.16.04.5","2.1.0-7ubuntu0.16.04.5+esm2","2.1.0-7ubuntu0.16.04.5+esm5","2.1.0-7ubuntu0.16.04.5+esm6","2.1.0-7ubuntu0.16.04.5+esm7","2.1.0-7ubuntu0.16.04.5+esm8","2.1.0-7ubuntu0.16.04.5+esm9","2.1.0-7ubuntu0.16.04.5+esm10","2.1.0-7ubuntu0.16.04.5+esm11","2.1.0-7ubuntu0.16.04.5+esm12","2.1.0-7ubuntu0.16.04.5+esm13","2.1.0-7ubuntu0.16.04.5+esm14"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ayttm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.3-3build1","0.6.3-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cableswig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.1.0+git20150808-1","0.1.0+git20150808-2","0.1.0+git20150808-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"cadaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.23.3-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"coin3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.4~abc9f50+dfsg1-1","3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1","3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gdcm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.4-4","2.4.4-4build1","2.4.4-4ubuntu1","2.6.1-3","2.6.2-1","2.6.2-2","2.6.2-3","2.6.3-1","2.6.3-1ubuntu1","2.6.3-2ubuntu1","2.6.3-3ubuntu1","2.6.3-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.1-1ubuntu3","4.8.1-1ubuntu4","4.8.2-3.1ubuntu1","4.9.0-3ubuntu2","4.9.0-4ubuntu1","4.9.0-4ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2-3build3","1.2-3ubuntu0.1~esm1","1.2-3ubuntu0.16.04.1~esm1","1.2-3ubuntu0.16.04.1~esm2","1.2-3ubuntu0.16.04.1~esm3","1.2-3ubuntu0.16.04.1~esm4","1.2-3ubuntu0.16.04.1~esm5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds1-5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"smart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.7-4","2.4.7-4build1","2.4.7-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.3-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vnc4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.1.1+xorg4.3.0-37.3ubuntu2","4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.10.1+dfsg-2","5.10.1+dfsg-2build3","5.10.1+dfsg-2.1build1","5.10.1+dfsg-2.1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wbxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.7-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.33.14-0.2ubuntu3","1.33.14-1ubuntu1","1.33.14-1ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.3-1","2.2.3-2","2.2.5-0ubuntu2","2.2.5-3","2.2.5-3ubuntu0.1","2.2.5-3ubuntu0.2","2.2.5-3ubuntu0.4","2.2.5-3ubuntu0.7","2.2.5-3ubuntu0.8","2.2.5-3ubuntu0.9","2.2.5-3ubuntu0.9+esm1","2.2.5-3ubuntu0.9+esm2","2.2.5-3ubuntu0.9+esm3","2.2.5-3ubuntu0.9+esm4","2.2.5-3ubuntu0.9+esm5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cadaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.23.3-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"coin3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.4~abc9f50+dfsg1-2","3.1.4~abc9f50+dfsg2-1","3.1.4~abc9f50+dfsg3-1","3.1.4~abc9f50+dfsg3-2","3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gdcm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.2-3build1","2.8.3-1","2.8.4-1","2.8.4-1build2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.2-dfsg1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2-4","1.2-4ubuntu0.18.04.1~esm1","1.2-4ubuntu0.18.04.1~esm2","1.2-4ubuntu0.18.04.1~esm3","1.2-4ubuntu0.18.04.1~esm4","1.2-4ubuntu0.18.04.1~esm5","1.2-4ubuntu0.18.04.1~esm6","1.2-4ubuntu0.18.04.1~esm7"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds1-5build1","0.13+ds1-6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"smart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.7-5ubuntu1","2.4.7-5ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.3-1","0.9.0-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"vnc4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.1.1+xorg4.3.0-37.3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"wbxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.7-1","0.10.7-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.33.14-7","1.33.14-8","1.33.14-8build1","1.33.14-8ubuntu0.18.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.7-2","2.2.9-1","2.2.9-1build1","2.2.9-1ubuntu0.2","2.2.9-1ubuntu0.4","2.2.9-1ubuntu0.5","2.2.9-1ubuntu0.6","2.2.9-1ubuntu0.7","2.2.9-1ubuntu0.8","2.2.9-1ubuntu0.8+esm1","2.2.9-1ubuntu0.8+esm2","2.2.9-1ubuntu0.8+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cadaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.23.3-2.1build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.2-dfsg1-4.1ubuntu1","4.13.2-dfsg1-1ubuntu1","4.13.2-dfsg1-4ubuntu1","4.13.2-dfsg1-6","4.13.2-dfsg1-6ubuntu1","4.13.2-dfsg1-8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2-4","1.2-4ubuntu0.20.04.1~esm1","1.2-4ubuntu0.20.04.1~esm2","1.2-4ubuntu0.20.04.1~esm3","1.2-4ubuntu0.20.04.1~esm4","1.2-4ubuntu0.20.04.1~esm5","1.2-4ubuntu0.20.04.1~esm6","1.2-4ubuntu0.20.04.1~esm7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds1-6","0.13+ds2-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.7-6build1","2.4.7-6build2","2.4.7-6ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.1-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wbxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.7-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.33.14-8build1","1.33.14-8build2","1.33.14-8ubuntu0.20.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cadaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.23.3-2.1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.1-2","2.4.1-3","2.4.2-1","2.4.3-1","2.4.3-2","2.4.4-1","2.4.6-1","2.4.7-1","2.4.7-1ubuntu0.1","2.4.7-1ubuntu0.2","2.4.7-1ubuntu0.3","2.4.7-1ubuntu0.4","2.4.7-1ubuntu0.5","2.4.7-1ubuntu0.6","2.4.7-1ubuntu0.7","2.4.7-1ubuntu0.8","2.4.7-1ubuntu0.9"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.13.3withdata-dfsg1-4.1","4.13.3withdata-dfsg2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2-4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds2-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.2-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wbxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.7-1build1","0.11.7+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.7-6build3","2.4.7-6.1","2.4.7-6.1build1","2.4.7-6.1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.33.14-9","1.33.14-10","1.33.14-10ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"cadaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.24+dfsg-2","0.24+dfsg-3","0.24+dfsg-3build1","0.24+dfsg-3build2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-2ubuntu0.5"}]}],"versions":["2.5.0-2","2.6.0-1","2.6.1-2","2.6.1-2build1","2.6.1-2ubuntu0.1","2.6.1-2ubuntu0.2","2.6.1-2ubuntu0.3","2.6.1-2ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxmltok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2-4ubuntu1","1.2-4.1ubuntu1","1.2-4.1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds2-1","0.13+ds2-1build1","0.13+ds2-1build2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"tdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.3-1","0.9.3-1build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"wbxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.11.8+dfsg-3","0.11.8+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.7-6.2","2.4.7-6.2build1","2.4.7-6.2build2","2.4.7-6.2build3","2.4.7-6.2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.33.14-11","1.33.14-11.1","1.33.14-12","1.33.14-12build1","1.33.14-12build2","1.33.14-12ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"cadaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.26+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.1-1","2.7.1-2","2.7.1-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds2-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.7-6.3","2.4.7-6.3build1","2.4.7-7"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"tdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.5.1-2","0.9.5.1-3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"wbxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.11.10+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.59.03-7","1.59.03-9","1.59.03-10","1.59.03-10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"cadaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.28+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds2-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.7-7.1","2.4.7-7.2","2.4.7-7.2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"tdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.6-2","0.9.6-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"wbxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.11.10+dfsg-3","0.11.10+dfsg-4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.60.05-1","1.60.05-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"cadaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.26+dfsg-2","0.28+dfsg-1","0.28+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-1ubuntu0.1"}]}],"versions":["2.7.1-2","2.7.3-1","2.7.4-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"matanza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13+ds2-2","0.13+ds2-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"tdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.5.1-3","0.9.6-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"wbxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.11.10+dfsg-2","0.11.10+dfsg-2build1","0.11.10+dfsg-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xmlrpc-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.59.03-10.1","1.60.05-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"swish-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.7-7","2.4.7-7.1","2.4.7-7.1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4ubuntu1.4+esm12"}]}],"versions":["2.1.0-4","2.1.0-4ubuntu1","2.1.0-4ubuntu1.1","2.1.0-4ubuntu1.2","2.1.0-4ubuntu1.3","2.1.0-4ubuntu1.4","2.1.0-4ubuntu1.4+esm1","2.1.0-4ubuntu1.4+esm2","2.1.0-4ubuntu1.4+esm4","2.1.0-4ubuntu1.4+esm6","2.1.0-4ubuntu1.4+esm7","2.1.0-4ubuntu1.4+esm8","2.1.0-4ubuntu1.4+esm9","2.1.0-4ubuntu1.4+esm10","2.1.0-4ubuntu1.4+esm11"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-7ubuntu0.16.04.5+esm13"}]}],"versions":["2.1.0-7","2.1.0-7ubuntu0.16.04.1","2.1.0-7ubuntu0.16.04.2","2.1.0-7ubuntu0.16.04.3","2.1.0-7ubuntu0.16.04.4","2.1.0-7ubuntu0.16.04.5","2.1.0-7ubuntu0.16.04.5+esm2","2.1.0-7ubuntu0.16.04.5+esm5","2.1.0-7ubuntu0.16.04.5+esm6","2.1.0-7ubuntu0.16.04.5+esm7","2.1.0-7ubuntu0.16.04.5+esm8","2.1.0-7ubuntu0.16.04.5+esm9","2.1.0-7ubuntu0.16.04.5+esm10","2.1.0-7ubuntu0.16.04.5+esm11","2.1.0-7ubuntu0.16.04.5+esm12"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-3ubuntu0.9+esm4"}]}],"versions":["2.2.3-1","2.2.3-2","2.2.5-0ubuntu2","2.2.5-3","2.2.5-3ubuntu0.1","2.2.5-3ubuntu0.2","2.2.5-3ubuntu0.4","2.2.5-3ubuntu0.7","2.2.5-3ubuntu0.8","2.2.5-3ubuntu0.9","2.2.5-3ubuntu0.9+esm1","2.2.5-3ubuntu0.9+esm2","2.2.5-3ubuntu0.9+esm3"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.9-1ubuntu0.8+esm2"}]}],"versions":["2.2.7-2","2.2.9-1","2.2.9-1build1","2.2.9-1ubuntu0.2","2.2.9-1ubuntu0.4","2.2.9-1ubuntu0.5","2.2.9-1ubuntu0.6","2.2.9-1ubuntu0.7","2.2.9-1ubuntu0.8","2.2.9-1ubuntu0.8+esm1"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1ubuntu0.8"}]}],"versions":["2.4.1-2","2.4.1-3","2.4.2-1","2.4.3-1","2.4.3-2","2.4.4-1","2.4.6-1","2.4.7-1","2.4.7-1ubuntu0.1","2.4.7-1ubuntu0.2","2.4.7-1ubuntu0.3","2.4.7-1ubuntu0.4","2.4.7-1ubuntu0.5","2.4.7-1ubuntu0.6","2.4.7-1ubuntu0.7"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-2ubuntu0.5"}]}],"versions":["2.5.0-2","2.6.0-1","2.6.1-2","2.6.1-2build1","2.6.1-2ubuntu0.1","2.6.1-2ubuntu0.2","2.6.1-2ubuntu0.3","2.6.1-2ubuntu0.4"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-1ubuntu0.1"}]}],"versions":["2.7.1-2","2.7.3-1","2.7.4-1"],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.21-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"expat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.4-160000.1.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-160000.1.1"}]}],"bundled":85}],"products":[{"vendor":"libexpat project","product":"libexpat"},{"vendor":"libexpat_project","product":"libexpat"},{"vendor":"red hat","product":"red hat discovery 2"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat jboss core services 2.4.62.sp4"},{"vendor":"red hat","product":"red hat update infrastructure 5"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0)"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0)"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp (6es7518-4fx00-1ab0)"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp (6es7518-4fx00-1ac0)"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp (6ag1518-4ax00-4ac0)"}],"references":[{"url":"https://github.com/libexpat/libexpat/pull/1216","tags":["Exploit","Issue Tracking","Patch","fix","web","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2026/05/11/16","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-45186","tags":["vdb-entry","x_refsource_REDHAT","report","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2468575","tags":["issue-tracking","x_refsource_REDHAT","report","web"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45186.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22715","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:23230","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22721","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:29197","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27201","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26319","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45186","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-r396-2q2c-pjhr"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-45186","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2468575","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-22715.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-22721.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-23230.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89756","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109704","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109705","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109706","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109707","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109708","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109709","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109711","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109712","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109713","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109715","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109716","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109717","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109718","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109719","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109720","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109721","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109722","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109723","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109724","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109725","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109726","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109727","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109728","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109729","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109730","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109732","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109733","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109736","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109737","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109738","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109740","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109741","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109742","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109743","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109744","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109745","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109751","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109752","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109753","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109782","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550397","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550404","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550405","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550413","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550419","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550420","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550424","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550433","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550438","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550446","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550451","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550455","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-89756.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89757","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109754","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109756","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109757","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109759","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109760","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109762","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109763","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-89757.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89758","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-77214","tags":["report"]},{"url":"https://bugzilla.redhat.com/2547476","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-89758.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:90895","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-90895.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93443","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109710","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109731","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109734","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109764","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109765","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109766","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109767","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109770","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109775","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109776","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109777","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109778","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109781","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109783","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550393","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550394","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550396","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550400","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550401","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550403","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550406","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550408","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550410","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550411","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550412","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550417","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550418","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550421","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550422","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550425","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550426","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550428","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550429","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550430","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550431","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550432","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550434","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550436","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550440","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550442","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550444","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550450","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550452","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550454","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550458","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550459","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550461","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550463","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550464","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550465","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550467","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550468","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550469","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550470","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550471","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550472","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550473","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550474","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550475","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550476","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550477","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550478","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550480","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-93443.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-45186","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1779122132.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1779129222.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1779129362.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1779130424.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1779183482.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1779183767.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1779183996.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1779184141.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1779358911.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1779358954.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1779359157.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1779359397.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1779359429.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1779361284.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45186.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-45186","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0204.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35522","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/11/16","tags":["web"]},{"url":"https://blog.hartwork.org/posts/expat-2-8-1-released/","tags":["web"]},{"url":"https://github.com/libexpat/libexpat/blob/R_2_8_1/expat/Changes","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2430","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2431","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2432","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2433","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2500","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22715.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45186","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22721.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_23230.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:77236","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77236.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:22715","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:22721","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:23230","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:89756","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550403","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550405","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550410","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550429","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550438","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550467","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550480","tags":["report"]},{"url":"https://errata.rockylinux.org/RLSA-2026:89757","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550464","tags":["report"]},{"url":"https://errata.rockylinux.org/RLSA-2026:89758","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547476","tags":["report"]},{"url":"https://errata.rockylinux.org/RLSA-2026:90895","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:93443","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550463","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550477","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623743-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259240","tags":["report"]},{"url":"https://bugzilla.suse.com/1259611","tags":["report"]},{"url":"https://bugzilla.suse.com/1259734","tags":["report"]},{"url":"https://bugzilla.suse.com/1259735","tags":["report"]},{"url":"https://bugzilla.suse.com/1260026","tags":["report"]},{"url":"https://bugzilla.suse.com/1261969","tags":["report"]},{"url":"https://bugzilla.suse.com/1262098","tags":["report"]},{"url":"https://bugzilla.suse.com/1262319","tags":["report"]},{"url":"https://bugzilla.suse.com/1264962","tags":["report"]},{"url":"https://bugzilla.suse.com/1265268","tags":["report"]},{"url":"https://bugzilla.suse.com/1267581","tags":["report"]},{"url":"https://bugzilla.suse.com/1267821","tags":["report"]},{"url":"https://bugzilla.suse.com/1267974","tags":["report"]},{"url":"https://bugzilla.suse.com/1268977","tags":["report"]},{"url":"https://bugzilla.suse.com/1269066","tags":["report"]},{"url":"https://bugzilla.suse.com/1269788","tags":["report"]},{"url":"https://bugzilla.suse.com/1269959","tags":["report"]},{"url":"https://bugzilla.suse.com/1271192","tags":["report"]},{"url":"https://bugzilla.suse.com/1276223","tags":["report"]},{"url":"https://bugzilla.suse.com/1276226","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9669","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623894-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1262263","tags":["report"]},{"url":"https://bugzilla.suse.com/1264713","tags":["report"]},{"url":"https://bugzilla.suse.com/1267631","tags":["report"]},{"url":"https://bugzilla.suse.com/1268572","tags":["report"]},{"url":"https://bugzilla.suse.com/1268573","tags":["report"]},{"url":"https://bugzilla.suse.com/1275096","tags":["report"]},{"url":"https://bugzilla.suse.com/1275594","tags":["report"]},{"url":"https://bugzilla.suse.com/1275732","tags":["report"]},{"url":"https://bugzilla.suse.com/1275859","tags":["report"]},{"url":"https://bugzilla.suse.com/1275860","tags":["report"]},{"url":"https://bugzilla.suse.com/1275915","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-66046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76957","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623912-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624260-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259712","tags":["report"]},{"url":"https://bugzilla.suse.com/1259727","tags":["report"]},{"url":"https://bugzilla.suse.com/1259730","tags":["report"]},{"url":"https://bugzilla.suse.com/1275098","tags":["report"]},{"url":"https://bugzilla.suse.com/1275605","tags":["report"]},{"url":"https://bugzilla.suse.com/1275736","tags":["report"]},{"url":"https://bugzilla.suse.com/1282347","tags":["report"]},{"url":"https://bugzilla.suse.com/1284493","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93990","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624323-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1249584","tags":["report"]},{"url":"https://bugzilla.suse.com/1257144","tags":["report"]},{"url":"https://bugzilla.suse.com/1257496","tags":["report"]},{"url":"https://bugzilla.suse.com/1259711","tags":["report"]},{"url":"https://bugzilla.suse.com/1259726","tags":["report"]},{"url":"https://bugzilla.suse.com/1259729","tags":["report"]},{"url":"https://bugzilla.suse.com/1275115","tags":["report"]},{"url":"https://bugzilla.suse.com/1283493","tags":["report"]},{"url":"https://bugzilla.suse.com/1284334","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-43680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-102633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-77214","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624554-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263649-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257041","tags":["report"]},{"url":"https://bugzilla.suse.com/1257044","tags":["report"]},{"url":"https://bugzilla.suse.com/1262429","tags":["report"]},{"url":"https://bugzilla.suse.com/1263083","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3219","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264534-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1276227","tags":["report"]},{"url":"https://bugzilla.suse.com/1277111","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19672","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264615-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264619-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264623-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264736-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1275108","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110249","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264806-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264834-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-45186","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8790-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-59375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-32776","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-32777","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-32778","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-41080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-50219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-56403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-56404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-56405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-56408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-56412","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-45186","description":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.","status":"published","published":"2026-05-10T06:36:16.927Z","modified":"2026-11-10T12:46:47.718Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-407","CWE-407"],"updated_at":"2026-11-10T13:38:45.30478Z"}],"euvd":[{"id":"EUVD-2026-28985","description":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.","status":"published","published":"2026-05-10T06:36:16Z","modified":"2026-11-10T12:46:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-10T14:21:10.443548Z"}],"ghsa":[{"id":"GHSA-r396-2q2c-pjhr","title":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows...","description":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.","status":"published","published":"2026-05-10T09:31:32Z","modified":"2026-11-10T15:33:38Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-407"],"updated_at":"2026-11-10T15:55:02.881893Z"}],"nvd":[{"id":"CVE-2026-45186","description":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.","status":"published","published":"2026-05-10T07:16:07.883Z","modified":"2026-11-10T13:19:13.03Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-407"],"updated_at":"2026-11-10T16:19:46.886348Z"}],"osv":[{"id":"ALPINE-CVE-2026-45186","description":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.","status":"published","published":"2026-05-10T07:16:07.883Z","modified":"2026-10-01T02:17:49.310682187Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"BELL-CVE-2026-45186","status":"published","published":"2026-05-13T12:21:02.432367Z","modified":"2026-05-16T07:15:37.862287Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:24.12174Z"},{"id":"CVE-2026-45186","description":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.","status":"published","published":"2026-05-10T06:36:16.927Z","modified":"2026-11-07T17:27:09.252093216Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-407"],"updated_at":"2026-11-07T17:50:18.36727Z"},{"id":"DEBIAN-CVE-2026-45186","description":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.","status":"published","published":"2026-05-10T07:16:07.883Z","modified":"2026-10-01T03:03:05.984334677Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:55.669088Z"},{"id":"JLSEC-2026-1223","description":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.","status":"published","published":"2026-08-09T01:27:54.135Z","modified":"2026-08-09T01:30:04.12616932Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2026-2430","title":"expat security update","description":"expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial.\r\n\r\nSecurity Fix(es):\n\nIn libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.(CVE-2026-45186)","status":"published","published":"2026-05-22T11:11:23Z","modified":"2026-08-18T01:20:00.046868777Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"OESA-2026-2431","title":"expat security update","description":"expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial.\r\n\r\nSecurity Fix(es):\n\nIn libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.(CVE-2026-45186)","status":"published","published":"2026-05-22T11:11:23Z","modified":"2026-08-18T01:19:59.485570351Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"OESA-2026-2432","title":"expat security update","description":"expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial.\r\n\r\nSecurity Fix(es):\n\nIn libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.(CVE-2026-45186)","status":"published","published":"2026-05-22T11:11:23Z","modified":"2026-08-18T01:19:59.450015601Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"OESA-2026-2433","title":"expat security update","description":"expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial.\r\n\r\nSecurity Fix(es):\n\nIn libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.(CVE-2026-45186)","status":"published","published":"2026-05-22T11:11:23Z","modified":"2026-08-18T01:19:59.438419034Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"OESA-2026-2500","title":"expat security update","description":"expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial.\r\n\r\nSecurity Fix(es):\n\nIn libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.(CVE-2026-45186)","status":"published","published":"2026-05-29T11:11:27Z","modified":"2026-08-18T01:20:01.361002118Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"RHSA-2026:22715","title":"Red Hat Security Advisory: expat security update","status":"published","published":"2026-06-04T10:08:03Z","modified":"2026-10-09T10:22:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:22721","title":"Red Hat Security Advisory: expat security update","status":"published","published":"2026-06-04T10:08:05Z","modified":"2026-10-09T10:22:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:23230","title":"Red Hat Security Advisory: expat security update","status":"published","published":"2026-06-05T10:06:26Z","modified":"2026-10-09T10:22:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:77236","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-10-08T10:20:16Z","modified":"2026-10-10T10:22:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:22715","title":"Important: expat security update","description":"Expat is a C library for parsing XML documents.\n\nSecurity Fix(es):\n\n* libexpat: denial of service via crafted XML input (CVE-2026-45186)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-05T12:04:50.053452Z","modified":"2026-06-05T12:30:04.570487804Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:22721","title":"Important: expat security update","description":"Expat is a C library for parsing XML documents.\n\nSecurity Fix(es):\n\n* libexpat: denial of service via crafted XML input (CVE-2026-45186)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-05T06:00:44.014594Z","modified":"2026-06-05T06:30:07.707708414Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:23230","title":"Important: expat security update","description":"Expat is a C library for parsing XML documents.\n\nSecurity Fix(es):\n\n* libexpat: denial of service via crafted XML input (CVE-2026-45186)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-05T12:03:10.63425Z","modified":"2026-06-05T12:30:05.878745145Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:89756","title":"Important: firefox security, bug fix, and enhancement update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* libexpat: denial of service via crafted XML input (CVE-2026-45186)\n\n* firefox: thunderbird: Privilege escalation in the Application Update component (CVE-2026-109704)\n\n* firefox: Use-after-free in the XML component (CVE-2026-109718)\n\n* firefox: Information disclosure in the PDF Viewer component (CVE-2026-109742)\n\n* firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109715)\n\n* firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget (CVE-2026-109740)\n\n* firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-109706)\n\n* firefox: Use-after-free in the Crash Reporting component (CVE-2026-109713)\n\n* firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109724)\n\n* firefox: Sandbox escape due to uninitialized memory in the DOM: Web Serial component (CVE-2026-109745)\n\n* firefox: Mitigation bypass in the File Handling component (CVE-2026-109782)\n\n* firefox: Information disclosure, privilege escalation in the Security: Process Sandboxing component (CVE-2026-109709)\n\n* firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component (CVE-2026-109705)\n\n* firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-109738)\n\n* firefox: Use-after-free in the Storage: Bucket File System component (CVE-2026-109741)\n\n* firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-109729)\n\n* firefox: Other issue in the DOM: File component (CVE-2026-109744)\n\n* firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109716)\n\n* firefox: Race condition, use-after-free in the Graphics: CanvasWebGL component (CVE-2026-109719)\n\n* firefox: Incorrect boundary conditions in the Layout component (CVE-2026-109753)\n\n* firefox: Integer overflow in the Layout: Text and Fonts component (CVE-2026-109723)\n\n* firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109733)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-109708)\n\n* firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-109717)\n\n* firefox: Use-after-free in the DOM: Workers component (CVE-2026-109752)\n\n* firefox: Sandbox escape due to use-after-free in the Networking component (CVE-2026-109707)\n\n* firefox: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-109720)\n\n* firefox: Use-after-free in the SVG component (CVE-2026-109726)\n\n* firefox: Integer overflow in the Graphics component (CVE-2026-109730)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2026-109727)\n\n* firefox: Mitigation bypass in the Enterprise Policies component (CVE-2026-109737)\n\n* firefox: Use-after-free in the DOM: Streams component (CVE-2026-109732)\n\n* firefox: Information disclosure in the Networking component (CVE-2026-109751)\n\n* firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109725)\n\n* firefox: Sandbox escape due to uninitialized memory in the Graphics component (CVE-2026-109712)\n\n* firefox: Use-after-free in the Graphics: Canvas2D component (CVE-2026-109711)\n\n* firefox: Frame poisoning in the Layout component (CVE-2026-109736)\n\n* firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109722)\n\n* firefox: Use-after-free in the DOM: Animation component (CVE-2026-109728)\n\n* firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-109721)\n\n* firefox: Privilege escalation in the Panning and Zooming component (CVE-2026-109743)\n\nBug Fix(es) and Enhancement(s):\n\n* Firefox ESR 153 rebase [rhel-8.10.z] (JIRA:Rocky Linux-175143)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T12:01:20.904461Z","modified":"2026-10-31T12:30:02.43808898Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:89757","title":"Important: firefox security, bug fix, and enhancement update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* libexpat: denial of service via crafted XML input (CVE-2026-45186)\n\n* firefox: thunderbird: Privilege escalation in the Application Update component (CVE-2026-109704)\n\n* firefox: Use-after-free in the XML component (CVE-2026-109718)\n\n* firefox: Information disclosure in the PDF Viewer component (CVE-2026-109742)\n\n* firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109715)\n\n* firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget (CVE-2026-109740)\n\n* firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-109706)\n\n* firefox: Use-after-free in the Crash Reporting component (CVE-2026-109713)\n\n* firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109724)\n\n* firefox: Sandbox escape due to uninitialized memory in the DOM: Web Serial component (CVE-2026-109745)\n\n* firefox: Mitigation bypass in the File Handling component (CVE-2026-109782)\n\n* firefox: Information disclosure, privilege escalation in the Security: Process Sandboxing component (CVE-2026-109709)\n\n* firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component (CVE-2026-109705)\n\n* firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-109738)\n\n* firefox: Sandbox escape due to race condition in the Networking component (CVE-2026-109757)\n\n* firefox: Use-after-free in the Storage: Bucket File System component (CVE-2026-109741)\n\n* firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-109729)\n\n* firefox: Other issue in the DOM: File component (CVE-2026-109744)\n\n* firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109716)\n\n* firefox: Race condition, use-after-free in the Graphics: CanvasWebGL component (CVE-2026-109719)\n\n* firefox: Incorrect boundary conditions in the Layout component (CVE-2026-109753)\n\n* firefox: Integer overflow in the Layout: Text and Fonts component (CVE-2026-109723)\n\n* firefox: Privilege escalation in the DOM: Navigation component (CVE-2026-109756)\n\n* firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109733)\n\n* firefox: Mitigation bypass in the File Handling component (CVE-2026-109763)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-109708)\n\n* firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-109717)\n\n* firefox: Use-after-free in the DOM: Workers component (CVE-2026-109752)\n\n* firefox: Sandbox escape due to use-after-free in the Networking component (CVE-2026-109707)\n\n* firefox: Mitigation bypass in the Networking: HTTP component (CVE-2026-109760)\n\n* firefox: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-109720)\n\n* firefox: Use-after-free in the SVG component (CVE-2026-109726)\n\n* firefox: Integer overflow in the Graphics component (CVE-2026-109730)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2026-109727)\n\n* firefox: Mitigation bypass in the Enterprise Policies component (CVE-2026-109737)\n\n* firefox: Use-after-free in the DOM: Streams component (CVE-2026-109732)\n\n* firefox: Site isolation issue in the Networking component (CVE-2026-109759)\n\n* firefox: Incorrect boundary conditions in the SVG component (CVE-2026-109762)\n\n* firefox: Incorrect boundary conditions in the DOM: Editor component (CVE-2026-109754)\n\n* firefox: Information disclosure in the Networking component (CVE-2026-109751)\n\n* firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109725)\n\n* firefox: Sandbox escape due to uninitialized memory in the Graphics component (CVE-2026-109712)\n\n* firefox: Use-after-free in the Graphics: Canvas2D component (CVE-2026-109711)\n\n* firefox: Frame poisoning in the Layout component (CVE-2026-109736)\n\n* firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109722)\n\n* firefox: Use-after-free in the DOM: Animation component (CVE-2026-109728)\n\n* firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-109721)\n\n* firefox: Privilege escalation in the Panning and Zooming component (CVE-2026-109743)\n\nBug Fix(es) and Enhancement(s):\n\n* Firefox ESR 153 rebase [rhel-9.8.z] (JIRA:Rocky Linux-175155)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T12:05:03.078979Z","modified":"2026-10-31T12:30:02.523794089Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:89758","title":"Important: firefox security, bug fix, and enhancement update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* libexpat: denial of service via crafted XML input (CVE-2026-45186)\n\n* expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer (CVE-2026-77214)\n\n* firefox: thunderbird: Privilege escalation in the Application Update component (CVE-2026-109704)\n\n* firefox: Use-after-free in the XML component (CVE-2026-109718)\n\n* firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109715)\n\n* firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget (CVE-2026-109740)\n\n* firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-109706)\n\n* firefox: Use-after-free in the Crash Reporting component (CVE-2026-109713)\n\n* firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109724)\n\n* firefox: Information disclosure, privilege escalation in the Security: Process Sandboxing component (CVE-2026-109709)\n\n* firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component (CVE-2026-109705)\n\n* firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-109729)\n\n* firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109716)\n\n* firefox: Race condition, use-after-free in the Graphics: CanvasWebGL component (CVE-2026-109719)\n\n* firefox: Integer overflow in the Layout: Text and Fonts component (CVE-2026-109723)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-109708)\n\n* firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-109717)\n\n* firefox: Sandbox escape due to use-after-free in the Networking component (CVE-2026-109707)\n\n* firefox: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-109720)\n\n* firefox: Use-after-free in the SVG component (CVE-2026-109726)\n\n* firefox: Integer overflow in the Graphics component (CVE-2026-109730)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2026-109727)\n\n* firefox: Use-after-free in the DOM: Streams component (CVE-2026-109732)\n\n* firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109725)\n\n* firefox: Sandbox escape due to uninitialized memory in the Graphics component (CVE-2026-109712)\n\n* firefox: Use-after-free in the Graphics: Canvas2D component (CVE-2026-109711)\n\n* firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109722)\n\n* firefox: Use-after-free in the DOM: Animation component (CVE-2026-109728)\n\n* firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-109721)\n\nBug Fix(es) and Enhancement(s):\n\n* Firefox ESR 153 rebase [rhel-10.2.z] (JIRA:Rocky Linux-175166)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T12:09:44.748638Z","modified":"2026-10-31T12:30:02.5217581Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:90895","title":"Important: thunderbird security, bug fix, and enhancement update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* libexpat: denial of service via crafted XML input (CVE-2026-45186)\n\nBug Fix(es) and Enhancement(s):\n\n* Thunderbird ESR 153 rebase [rhel-10.2.z] (JIRA:Rocky Linux-175207)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-29T12:08:23.381701Z","modified":"2026-10-29T12:30:03.187334005Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:93443","title":"Important: thunderbird security, bug fix, and enhancement update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* libexpat: denial of service via crafted XML input (CVE-2026-45186)\n\n* firefox: Mitigation bypass in the Enterprise Policies component (CVE-2026-109764)\n\n* firefox: Spoofing issue in the DOM: Web Serial component (CVE-2026-109770)\n\n* firefox: Mitigation bypass in the File Handling component (CVE-2026-109783)\n\n* firefox: thunderbird: Privilege escalation in the Application Update component (CVE-2026-109704)\n\n* firefox: Use-after-free in the XML component (CVE-2026-109718)\n\n* firefox: Information disclosure in the PDF Viewer component (CVE-2026-109742)\n\n* firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109715)\n\n* firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget (CVE-2026-109740)\n\n* firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-109706)\n\n* firefox: Use-after-free in the Crash Reporting component (CVE-2026-109713)\n\n* firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109724)\n\n* firefox: Sandbox escape due to uninitialized memory in the DOM: Web Serial component (CVE-2026-109745)\n\n* firefox: Mitigation bypass in the File Handling component (CVE-2026-109782)\n\n* firefox: Information disclosure, privilege escalation in the Security: Process Sandboxing component (CVE-2026-109709)\n\n* firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component (CVE-2026-109705)\n\n* firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-109738)\n\n* firefox: Sandbox escape due to race condition in the Networking component (CVE-2026-109757)\n\n* firefox: Use-after-free in the Storage: Bucket File System component (CVE-2026-109741)\n\n* firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-109729)\n\n* firefox: Other issue in the DOM: File component (CVE-2026-109744)\n\n* firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109716)\n\n* firefox: Race condition, use-after-free in the Graphics: CanvasWebGL component (CVE-2026-109719)\n\n* firefox: Incorrect boundary conditions in the Layout component (CVE-2026-109753)\n\n* firefox: Integer overflow in the Layout: Text and Fonts component (CVE-2026-109723)\n\n* firefox: Privilege escalation in the DOM: Navigation component (CVE-2026-109756)\n\n* firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109733)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-109734)\n\n* firefox: Mitigation bypass in the File Handling component (CVE-2026-109763)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-109708)\n\n* firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-109717)\n\n* firefox: Use-after-free in the DOM: Workers component (CVE-2026-109752)\n\n* firefox: Race condition in the XPCOM component (CVE-2026-109776)\n\n* firefox: Sandbox escape due to use-after-free in the Networking component (CVE-2026-109707)\n\n* firefox: Mitigation bypass in the Networking: HTTP component (CVE-2026-109760)\n\n* firefox: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-109720)\n\n* firefox: Information disclosure in the Storage: IndexedDB component (CVE-2026-109777)\n\n* firefox: Use-after-free in the SVG component (CVE-2026-109726)\n\n* firefox: Integer overflow in the Graphics component (CVE-2026-109730)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2026-109727)\n\n* firefox: Mitigation bypass in the Enterprise Policies component (CVE-2026-109737)\n\n* firefox: Mitigation bypass in the Enterprise Policies component (CVE-2026-109766)\n\n* firefox: Use-after-free in the DOM: Streams component (CVE-2026-109732)\n\n* firefox: Site isolation issue in the Networking component (CVE-2026-109759)\n\n* firefox: Privilege escalation in the WebExtensions component (CVE-2026-109778)\n\n* firefox: Incorrect boundary conditions in the SVG component (CVE-2026-109762)\n\n* firefox: Race condition, use-after-free in the Graphics: Text component (CVE-2026-109765)\n\n* firefox: Incorrect boundary conditions in the DOM: Editor component (CVE-2026-109754)\n\n* firefox: Information disclosure in the Networking component (CVE-2026-109751)\n\n* firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109725)\n\n* firefox: Sandbox escape due to uninitialized memory in the Graphics component (CVE-2026-109712)\n\n* firefox: Use-after-free in the Graphics: Canvas2D component (CVE-2026-109711)\n\n* firefox: Frame poisoning in the Layout component (CVE-2026-109736)\n\n* firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109722)\n\n* firefox: Information disclosure in the Networking component (CVE-2026-109767)\n\n* firefox: Denial-of-service in the WebRTC component (CVE-2026-109775)\n\n* firefox: Use-after-free in the DOM: Animation component (CVE-2026-109728)\n\n* firefox: Denial-of-service in the Printing: Output component (CVE-2026-109781)\n\n* firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-109710)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-109731)\n\n* firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-109721)\n\n* firefox: Privilege escalation in the Panning and Zooming component (CVE-2026-109743)\n\nBug Fix(es) and Enhancement(s):\n\n* Thunderbird ESR 153 rebase [rhel-9.8.z] (JIRA:Rocky Linux-175199)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-11-03T12:05:01.276494Z","modified":"2026-11-03T12:30:03.466920342Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T13:02:16.068655Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2026-45186","title":"CVE-2026-45186 in expat - Patched by Root","description":"Root has patched CVE-2026-45186 in the expat package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-10-19T10:19:12Z","modified":"2026-10-19T11:15:04.442965448Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:30.179841Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-45186","title":"CVE-2026-45186 in expat - Patched by Root","description":"Root has patched CVE-2026-45186 in the expat package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-09-25T11:40:57Z","modified":"2026-10-06T19:00:05.811112906Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:32.037361Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-45186","title":"CVE-2026-45186 in expat - Patched by Root","description":"Root has patched CVE-2026-45186 in the expat package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-31T11:50:58Z","modified":"2026-09-15T14:00:05.667417068Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:33.681527Z"},{"id":"UBUNTU-CVE-2026-45186","description":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.","status":"published","published":"2026-05-10T07:16:00Z","modified":"2026-10-17T12:58:23.243343532Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:26.396868Z"},{"id":"ALSA-2026:22715","title":"Important: expat security update","description":"Expat is a C library for parsing XML documents.  \n\nSecurity Fix(es):  \n\n  * libexpat: denial of service via crafted XML input (CVE-2026-45186)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-03T00:00:00Z","modified":"2026-10-29T11:30:25.632295859Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:22721","title":"Important: expat security update","description":"Expat is a C library for parsing XML documents.  \n\nSecurity Fix(es):  \n\n  * libexpat: denial of service via crafted XML input (CVE-2026-45186)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-03T00:00:00Z","modified":"2026-10-29T11:02:23.776119444Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:23230","title":"Important: expat security update","description":"Expat is a C library for parsing XML documents.  \n\nSecurity Fix(es):  \n\n  * libexpat: denial of service via crafted XML input (CVE-2026-45186)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-04T00:00:00Z","modified":"2026-10-29T11:32:33.920653923Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:89756","title":"Important: firefox security, bug fix, and enhancement update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * libexpat: denial of service via crafted XML input (CVE-2026-45186)\n  * firefox: thunderbird: Privilege escalation in the Application Update component (CVE-2026-109704)\n  * firefox: Use-after-free in the XML component (CVE-2026-109718)\n  * firefox: Information disclosure in the PDF Viewer component (CVE-2026-109742)\n  * firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109715)\n  * firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget (CVE-2026-109740)\n  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-109706)\n  * firefox: Use-after-free in the Crash Reporting component (CVE-2026-109713)\n  * firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109724)\n  * firefox: Sandbox escape due to uninitialized memory in the DOM: Web Serial component (CVE-2026-109745)\n  * firefox: Mitigation bypass in the File Handling component (CVE-2026-109782)\n  * firefox: Information disclosure, privilege escalation in the Security: Process Sandboxing component (CVE-2026-109709)\n  * firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component (CVE-2026-109705)\n  * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-109738)\n  * firefox: Use-after-free in the Storage: Bucket File System component (CVE-2026-109741)\n  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-109729)\n  * firefox: Other issue in the DOM: File component (CVE-2026-109744)\n  * firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109716)\n  * firefox: Race condition, use-after-free in the Graphics: CanvasWebGL component (CVE-2026-109719)\n  * firefox: Incorrect boundary conditions in the Layout component (CVE-2026-109753)\n  * firefox: Integer overflow in the Layout: Text and Fonts component (CVE-2026-109723)\n  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109733)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-109708)\n  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-109717)\n  * firefox: Use-after-free in the DOM: Workers component (CVE-2026-109752)\n  * firefox: Sandbox escape due to use-after-free in the Networking component (CVE-2026-109707)\n  * firefox: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-109720)\n  * firefox: Use-after-free in the SVG component (CVE-2026-109726)\n  * firefox: Integer overflow in the Graphics component (CVE-2026-109730)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2026-109727)\n  * firefox: Mitigation bypass in the Enterprise Policies component (CVE-2026-109737)\n  * firefox: Use-after-free in the DOM: Streams component (CVE-2026-109732)\n  * firefox: Information disclosure in the Networking component (CVE-2026-109751)\n  * firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109725)\n  * firefox: Sandbox escape due to uninitialized memory in the Graphics component (CVE-2026-109712)\n  * firefox: Use-after-free in the Graphics: Canvas2D component (CVE-2026-109711)\n  * firefox: Frame poisoning in the Layout component (CVE-2026-109736)\n  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109722)\n  * firefox: Use-after-free in the DOM: Animation component (CVE-2026-109728)\n  * firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-109721)\n  * firefox: Privilege escalation in the Panning and Zooming component (CVE-2026-109743)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Firefox ESR 153 rebase [rhel-8.10.z] (JIRA:RHEL-175143)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-26T00:00:00Z","modified":"2026-11-03T12:15:02.402298764Z","updated_at":"2026-11-03T12:31:37.107381Z"},{"id":"ALSA-2026:89757","title":"Important: firefox security, bug fix, and enhancement update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * libexpat: denial of service via crafted XML input (CVE-2026-45186)\n  * firefox: thunderbird: Privilege escalation in the Application Update component (CVE-2026-109704)\n  * firefox: Use-after-free in the XML component (CVE-2026-109718)\n  * firefox: Information disclosure in the PDF Viewer component (CVE-2026-109742)\n  * firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109715)\n  * firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget (CVE-2026-109740)\n  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-109706)\n  * firefox: Use-after-free in the Crash Reporting component (CVE-2026-109713)\n  * firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109724)\n  * firefox: Sandbox escape due to uninitialized memory in the DOM: Web Serial component (CVE-2026-109745)\n  * firefox: Mitigation bypass in the File Handling component (CVE-2026-109782)\n  * firefox: Information disclosure, privilege escalation in the Security: Process Sandboxing component (CVE-2026-109709)\n  * firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component (CVE-2026-109705)\n  * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-109738)\n  * firefox: Sandbox escape due to race condition in the Networking component (CVE-2026-109757)\n  * firefox: Use-after-free in the Storage: Bucket File System component (CVE-2026-109741)\n  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-109729)\n  * firefox: Other issue in the DOM: File component (CVE-2026-109744)\n  * firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109716)\n  * firefox: Race condition, use-after-free in the Graphics: CanvasWebGL component (CVE-2026-109719)\n  * firefox: Incorrect boundary conditions in the Layout component (CVE-2026-109753)\n  * firefox: Integer overflow in the Layout: Text and Fonts component (CVE-2026-109723)\n  * firefox: Privilege escalation in the DOM: Navigation component (CVE-2026-109756)\n  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109733)\n  * firefox: Mitigation bypass in the File Handling component (CVE-2026-109763)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-109708)\n  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-109717)\n  * firefox: Use-after-free in the DOM: Workers component (CVE-2026-109752)\n  * firefox: Sandbox escape due to use-after-free in the Networking component (CVE-2026-109707)\n  * firefox: Mitigation bypass in the Networking: HTTP component (CVE-2026-109760)\n  * firefox: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-109720)\n  * firefox: Use-after-free in the SVG component (CVE-2026-109726)\n  * firefox: Integer overflow in the Graphics component (CVE-2026-109730)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2026-109727)\n  * firefox: Mitigation bypass in the Enterprise Policies component (CVE-2026-109737)\n  * firefox: Use-after-free in the DOM: Streams component (CVE-2026-109732)\n  * firefox: Site isolation issue in the Networking component (CVE-2026-109759)\n  * firefox: Incorrect boundary conditions in the SVG component (CVE-2026-109762)\n  * firefox: Incorrect boundary conditions in the DOM: Editor component (CVE-2026-109754)\n  * firefox: Information disclosure in the Networking component (CVE-2026-109751)\n  * firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109725)\n  * firefox: Sandbox escape due to uninitialized memory in the Graphics component (CVE-2026-109712)\n  * firefox: Use-after-free in the Graphics: Canvas2D component (CVE-2026-109711)\n  * firefox: Frame poisoning in the Layout component (CVE-2026-109736)\n  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109722)\n  * firefox: Use-after-free in the DOM: Animation component (CVE-2026-109728)\n  * firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-109721)\n  * firefox: Privilege escalation in the Panning and Zooming component (CVE-2026-109743)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Firefox ESR 153 rebase [rhel-9.8.z] (JIRA:RHEL-175155)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-26T00:00:00Z","modified":"2026-11-01T13:45:02.40243427Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:89758","title":"Important: firefox security, bug fix, and enhancement update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * libexpat: denial of service via crafted XML input (CVE-2026-45186)\n  * expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer (CVE-2026-77214)\n  * firefox: thunderbird: Privilege escalation in the Application Update component (CVE-2026-109704)\n  * firefox: Use-after-free in the XML component (CVE-2026-109718)\n  * firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109715)\n  * firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget (CVE-2026-109740)\n  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-109706)\n  * firefox: Use-after-free in the Crash Reporting component (CVE-2026-109713)\n  * firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109724)\n  * firefox: Information disclosure, privilege escalation in the Security: Process Sandboxing component (CVE-2026-109709)\n  * firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component (CVE-2026-109705)\n  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-109729)\n  * firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109716)\n  * firefox: Race condition, use-after-free in the Graphics: CanvasWebGL component (CVE-2026-109719)\n  * firefox: Integer overflow in the Layout: Text and Fonts component (CVE-2026-109723)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-109708)\n  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-109717)\n  * firefox: Sandbox escape due to use-after-free in the Networking component (CVE-2026-109707)\n  * firefox: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-109720)\n  * firefox: Use-after-free in the SVG component (CVE-2026-109726)\n  * firefox: Integer overflow in the Graphics component (CVE-2026-109730)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2026-109727)\n  * firefox: Use-after-free in the DOM: Streams component (CVE-2026-109732)\n  * firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109725)\n  * firefox: Sandbox escape due to uninitialized memory in the Graphics component (CVE-2026-109712)\n  * firefox: Use-after-free in the Graphics: Canvas2D component (CVE-2026-109711)\n  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109722)\n  * firefox: Use-after-free in the DOM: Animation component (CVE-2026-109728)\n  * firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-109721)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Firefox ESR 153 rebase [rhel-10.2.z] (JIRA:RHEL-175166)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-26T00:00:00Z","modified":"2026-11-04T16:45:02.619158975Z","updated_at":"2026-11-04T17:11:08.071099Z"},{"id":"ALSA-2026:90895","title":"Important: thunderbird security, bug fix, and enhancement update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * libexpat: denial of service via crafted XML input (CVE-2026-45186)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Thunderbird ESR 153 rebase [rhel-10.2.z] (JIRA:RHEL-175207)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-27T00:00:00Z","modified":"2026-10-29T11:31:03.390460731Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:93443","title":"Important: thunderbird security, bug fix, and enhancement update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * libexpat: denial of service via crafted XML input (CVE-2026-45186)\n  * firefox: Mitigation bypass in the Enterprise Policies component (CVE-2026-109764)\n  * firefox: Spoofing issue in the DOM: Web Serial component (CVE-2026-109770)\n  * firefox: Mitigation bypass in the File Handling component (CVE-2026-109783)\n  * firefox: thunderbird: Privilege escalation in the Application Update component (CVE-2026-109704)\n  * firefox: Use-after-free in the XML component (CVE-2026-109718)\n  * firefox: Information disclosure in the PDF Viewer component (CVE-2026-109742)\n  * firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109715)\n  * firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget (CVE-2026-109740)\n  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-109706)\n  * firefox: Use-after-free in the Crash Reporting component (CVE-2026-109713)\n  * firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109724)\n  * firefox: Sandbox escape due to uninitialized memory in the DOM: Web Serial component (CVE-2026-109745)\n  * firefox: Mitigation bypass in the File Handling component (CVE-2026-109782)\n  * firefox: Information disclosure, privilege escalation in the Security: Process Sandboxing component (CVE-2026-109709)\n  * firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component (CVE-2026-109705)\n  * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-109738)\n  * firefox: Sandbox escape due to race condition in the Networking component (CVE-2026-109757)\n  * firefox: Use-after-free in the Storage: Bucket File System component (CVE-2026-109741)\n  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-109729)\n  * firefox: Other issue in the DOM: File component (CVE-2026-109744)\n  * firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109716)\n  * firefox: Race condition, use-after-free in the Graphics: CanvasWebGL component (CVE-2026-109719)\n  * firefox: Incorrect boundary conditions in the Layout component (CVE-2026-109753)\n  * firefox: Integer overflow in the Layout: Text and Fonts component (CVE-2026-109723)\n  * firefox: Privilege escalation in the DOM: Navigation component (CVE-2026-109756)\n  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109733)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-109734)\n  * firefox: Mitigation bypass in the File Handling component (CVE-2026-109763)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-109708)\n  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-109717)\n  * firefox: Use-after-free in the DOM: Workers component (CVE-2026-109752)\n  * firefox: Race condition in the XPCOM component (CVE-2026-109776)\n  * firefox: Sandbox escape due to use-after-free in the Networking component (CVE-2026-109707)\n  * firefox: Mitigation bypass in the Networking: HTTP component (CVE-2026-109760)\n  * firefox: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-109720)\n  * firefox: Information disclosure in the Storage: IndexedDB component (CVE-2026-109777)\n  * firefox: Use-after-free in the SVG component (CVE-2026-109726)\n  * firefox: Integer overflow in the Graphics component (CVE-2026-109730)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2026-109727)\n  * firefox: Mitigation bypass in the Enterprise Policies component (CVE-2026-109737)\n  * firefox: Mitigation bypass in the Enterprise Policies component (CVE-2026-109766)\n  * firefox: Use-after-free in the DOM: Streams component (CVE-2026-109732)\n  * firefox: Site isolation issue in the Networking component (CVE-2026-109759)\n  * firefox: Privilege escalation in the WebExtensions component (CVE-2026-109778)\n  * firefox: Incorrect boundary conditions in the SVG component (CVE-2026-109762)\n  * firefox: Race condition, use-after-free in the Graphics: Text component (CVE-2026-109765)\n  * firefox: Incorrect boundary conditions in the DOM: Editor component (CVE-2026-109754)\n  * firefox: Information disclosure in the Networking component (CVE-2026-109751)\n  * firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-109725)\n  * firefox: Sandbox escape due to uninitialized memory in the Graphics component (CVE-2026-109712)\n  * firefox: Use-after-free in the Graphics: Canvas2D component (CVE-2026-109711)\n  * firefox: Frame poisoning in the Layout component (CVE-2026-109736)\n  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109722)\n  * firefox: Information disclosure in the Networking component (CVE-2026-109767)\n  * firefox: Denial-of-service in the WebRTC component (CVE-2026-109775)\n  * firefox: Use-after-free in the DOM: Animation component (CVE-2026-109728)\n  * firefox: Denial-of-service in the Printing: Output component (CVE-2026-109781)\n  * firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-109710)\n  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-109731)\n  * firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-109721)\n  * firefox: Privilege escalation in the Panning and Zooming component (CVE-2026-109743)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Thunderbird ESR 153 rebase [rhel-9.8.z] (JIRA:RHEL-175199)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-11-02T00:00:00Z","modified":"2026-11-02T10:15:02.406147498Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"AZL-86340","title":"CVE-2026-45186 affecting package expat for versions less than 2.8.2-1","description":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.","status":"published","published":"2026-05-10T07:16:07Z","modified":"2026-08-28T17:56:46.409863Z","updated_at":"2026-11-02T15:28:10.677811Z"},{"id":"CLSA-2026-1779122132","title":"expat: Fix of CVE-2026-45186","description":"- CVE-2026-45186: fix quadratic runtime behavior in attribute collision detection","status":"published","published":"2026-05-18T16:35:36Z","modified":"2026-06-01T00:32:33.826951787Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779129222","title":"Fix CVE(s): CVE-2026-45186","description":"   * SECURITY UPDATE: fix quadratic complexity in attribute name collision check\n     - debian/patches/CVE-2026-45186.patch: fix quadratic complexity in attribute name collision check\n     - CVE-2026-45186","status":"published","published":"2026-05-18T18:33:46Z","modified":"2026-06-04T10:03:59.719587Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779129362","title":"Fix CVE(s): CVE-2026-45186","description":"   * SECURITY UPDATE: fix quadratic complexity in attribute name collision check\n     - debian/patches/CVE-2026-45186.patch: fix quadratic complexity in attribute name collision check\n     - CVE-2026-45186","status":"published","published":"2026-05-18T18:36:07Z","modified":"2026-06-04T10:03:56.322051Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779130424","title":"expat: Fix of CVE-2026-45186","description":"- CVE-2026-45186: fix quadratic complexity in attribute name collision check","status":"published","published":"2026-05-18T18:53:48Z","modified":"2026-06-01T00:32:53.749163462Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779183482","title":"Fix CVE(s): CVE-2026-45186","description":"   * SECURITY UPDATE: denial of service via O(n^2) attribute name collision\n     check with moderately sized crafted XML input\n     - debian/patches/CVE-2026-45186.patch: replace linear scan in\n       defineAttribute() with O(1) hash table lookup using new\n       ELEMENT_TYPE.defaultAttsNames field in expat/lib/xmlparse.c\n     - CVE-2026-45186","status":"published","published":"2026-05-19T09:38:08Z","modified":"2026-06-04T10:04:04.590242Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779183767","title":"expat: Fix of CVE-2026-45186","description":"- CVE-2026-45186: fix quadratic complexity in attribute name collision check","status":"published","published":"2026-05-19T09:42:51Z","modified":"2026-06-01T00:33:13.190874461Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779183996","title":"expat: Fix of CVE-2026-45186","description":"- CVE-2026-45186: fix quadratic complexity in attribute name collision check","status":"published","published":"2026-05-19T09:46:40Z","modified":"2026-06-01T00:33:15.192181292Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779184141","title":"expat: Fix of CVE-2026-45186","description":"- CVE-2026-45186: fix quadratic complexity in attribute name collision check","status":"published","published":"2026-05-19T09:49:05Z","modified":"2026-06-01T00:33:23.908942724Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779358911","title":"expat: Fix of CVE-2026-45186","description":"- CVE-2026-45186: fix quadratic runtime in attribute collision detection by\n  using a hash table for default attribute names instead of an O(n^2) loop","status":"published","published":"2026-05-21T10:21:54Z","modified":"2026-06-01T00:33:27.446159297Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779358954","title":"expat: Fix of CVE-2026-45186","description":"- CVE-2026-45186: fix quadratic runtime in attribute collision detection by\n  using a hash table for default attribute names instead of an O(n^2) loop","status":"published","published":"2026-05-21T10:22:38Z","modified":"2026-06-01T00:33:28.437082578Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779359157","title":"Fix CVE(s): CVE-2026-45186","description":"   * SECURITY UPDATE: Denial of service via quadratic attribute-name\n     collision check in libexpat before 2.8.1\n     - debian/patches/CVE-2026-45186.patch: introduce per-element\n       defaultAttsNames hash table and use it for O(1) attribute\n       collision detection in defineAttribute\n     - CVE-2026-45186","status":"published","published":"2026-05-21T10:26:02Z","modified":"2026-06-04T10:04:16.04248Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779359397","title":"expat: Fix of CVE-2026-45186","description":"- CVE-2026-45186: fix quadratic runtime in attribute collision detection by\n  using a hash table for default attribute names instead of an O(n^2) loop","status":"published","published":"2026-05-21T10:30:01Z","modified":"2026-10-26T09:31:48.765805925Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779359429","title":"expat: Fix of CVE-2026-45186","description":"- CVE-2026-45186: fix quadratic runtime in attribute collision detection by\n  using a hash table for default attribute names instead of an O(n^2) loop","status":"published","published":"2026-05-21T10:30:33Z","modified":"2026-06-01T00:33:26.025658041Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779361284","title":"expat: Fix of CVE-2026-45186","description":"- CVE-2026-45186: fix quadratic runtime in attribute collision detection by\n  using a hash table for default attribute names instead of an O(n^2) loop","status":"published","published":"2026-05-21T15:40:01Z","modified":"2026-10-26T09:31:39.304921104Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"MGASA-2026-0204","title":"Updated expat packages fix security vulnerabilities","description":"CVE-2026-45186 the computational complexity of attribute name collision\nchecks allows a denial of service via moderately sized crafted XML\ninput.\n","status":"published","published":"2026-06-12T23:28:19Z","modified":"2026-06-12T23:30:04.465336234Z","updated_at":"2026-11-02T15:49:43.178336Z"}]},"sources_more":{"osv":20}}