AZL-90231

Import Source

JSON Data

https://api.osv.dev/v1/vulns/AZL-90231

Upstream

Published

2026-06-21T16:16:27Z

Modified

2026-08-28T17:48:06.104657845Z

Summary

CVE-2026-56404 affecting package expat for versions less than 2.8.2-1

Details

libexpat before 2.8.2 has an integer overflow in addBinding.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.8.2-1

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-90231.json"