AZL-90252

Import Source

JSON Data

https://api.osv.dev/v1/vulns/AZL-90252

Upstream

Published

2026-06-21T16:16:28Z

Modified

2026-08-28T17:48:06.121240415Z

Summary

CVE-2026-56410 affecting package expat for versions less than 2.8.2-1

Details

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.8.2-1

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-90252.json"