JLSEC-2025-173

See a problem?
Please try reporting it to the source first.

Source

https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2025/JLSEC-2025-173.md

Import Source

https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-173.json

JSON Data

https://api.osv.dev/v1/vulns/JLSEC-2025-173

Upstream

CVE-2025-59375

Published

2025-10-21T14:51:00.329Z

Modified

2026-07-23T22:30:16.228730847Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...

Details

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

Database specific

{
    "license": "CC-BY-4.0",
    "sources": [
        {
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59375",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-59375",
            "modified": "2026-06-17T09:46:02.697Z",
            "database_specific": {
                "status": "Modified"
            },
            "published": "2025-09-15T03:15:40.920Z",
            "id": "CVE-2025-59375",
            "imported": "2026-07-17T20:41:03.248Z"
        }
    ]
}

References

Affected packages

Julia / Expat_jll

Package

Name: Expat_jll
Purl: pkg:julia/Expat_jll?uuid=2e619515-83b5-522b-bb60-26c02a35a201

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.3+0

Database specific

source

"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-173.json"