ALPINE-CVE-2026-24515
ALPINE-CVE-2026-24515
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.
CVSS 2.5 · Low · Fix available
- Published
- Updated
Stack: system
Affected products and versions
expat Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
expat Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
expat Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
expat Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
expat Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0