Skip to content

PatchFirst · Latest vulnerabilities

expat vulnerabilities · Page 2

Vulnerabilities published for expat in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 21

CVE-2021-45960
High · CVSS 8.8EPSS 4.67%Fix available
CVE-2021-45960
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
expat Operating systems
- Update to 2.2.9-1ubuntu0.2
Published January 1, 2022Updated October 14, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →