CVE-2026-56132

ADVISORY - debian

Summary

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.

expat 2.8.2-1 (bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140388) https://github.com/libexpat/libexpat/pull/1272

EPSS Score⁠: 0.00107 (0.014)

Common Weakness Enumeration (CWE)

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.