CVE-2026-76956

ADVISORY - nist

Summary

In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-394⁠

Unexpected Status Code or Return Value

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.