AZL-90246

Import Source

JSON Data

https://api.osv.dev/v1/vulns/AZL-90246

Upstream

Published

2026-06-21T17:16:44Z

Modified

2026-08-28T17:48:06Z

Summary

CVE-2026-56411 affecting package expat for versions less than 2.8.2-1

Details

xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.8.2-1

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-90246.json"