https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T13:40:55.744052+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-56412 CVE-2026-56412 2026-09-29T13:40:56.019853+00:00

Affected: libexpat project libexpat

libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.