CVE-2026-56410

ADVISORY - debian

Summary

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.

expat 2.8.2-1 (bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140557) https://github.com/libexpat/libexpat/pull/1252 Fixed by: https://github.com/libexpat/libexpat/commit/deeb97f7c88d17a16b0ea2521a13733abc283347 Fixed by: https://github.com/libexpat/libexpat/commit/cee20e91bf14dc7f6d2fc48f0d70d86b2dc3afea

EPSS Score⁠: 0.0011 (0.015)

Common Weakness Enumeration (CWE)

Impacted images

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.