PT-2026-39913 · Julia · Expat Jll

Publicado 2026-05-01 · Atualizado 2026-05-01

OSV

libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

Identificadores relacionados

JLSEC-2026-384

Produtos afetados

Expat Jll

Referências · 6

• https://github.com/libexpat/libexpat/pull/1183 · Nota
• https://github.com/libexpat/libexpat/issues/47 · Nota
• http://openwall.com/lists/oss-security/2026/04/26/1 · Nota
• https://blog.hartwork.org/posts/expat-2-8-0-released · Nota
• https://openwall.com/lists/oss-security/2026/04/26/1 · Nota
• https://osv.dev/vulnerability/JLSEC-2026-384 · Aviso do Fabricante