Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

libexpat infinite loop when parsing DTD content

published 6 months ago
Summary

The libexpat library in some versions is vulnerable to an infinite loop when parsing certain types of XML content. This could cause a denial-of-service (DoS) attack if an attacker were to send malicious XML data to a system using libexpat. To protect against this, update to the latest version of libexpat, version 2.7.5 or later.

What to do
  • Update juliabinarywrappers expat_jll to version 2.7.5+0.
Affected software
Ecosystem VendorProductAffected versions
Julia juliabinarywrappers expat_jll < 2.7.5+0
Fix: upgrade to 2.7.5+0
Original advisory text
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
References
Severity
5.5 Medium
Timeline
Published1 May 2026
Updated18 Jul 2026
First seen1 May 2026
Sources
JLSEC-2026-382 · OSV
Track software like this
Free during beta