← Back to CVE search

CVE-2026-41080

libexpat

Description

libexpat before 2.7.6 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

EPSS 0.4%
Published
2026-04-16 17:16:54
View source
Affected versions
<2.7.6
Type
Package