Threats affecting pkg:rpm/redhat/expat

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.9%	CVE-2026-66046Red Hat Security Advisory: expat security update High8.7EPSS 0.9%2026-09-28GCVE DatabaseCVE-2026-66046 This advisory addresses two important vulnerabilities in the Expat XML parsing library used in Red Hat Enterprise Linux 8 and related distributions. The first vulnerability (CVE-2026-66046) is a denial of service caused by quadratic complexity in attribute processing. The second (CVE-2026-93990) is an XML injection vulnerability via malformed UTF-16 input. Updated packages fixing these issues are available for multiple architectures including x86_64, s390x, ppc64le, and aarch64. EPSS 0.9%Report on CVE-2026-66046 Vulnerability Red Hat Product Security CWE-407	GCVE Database	2026-09-28

Page 1 of 1