Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

expat may let attackers run unwanted code

published 1 month ago

Summary

The expat library used by your applications can be tricked into executing code that an attacker provides. This could let an attacker affect the behavior of your software or access data. Upgrade expat to a version newer than 2.4.3‑r0 to eliminate the risk.

What to do

Update cleanstart expat to version 2.4.3-r0.

Affected software

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	expat	< 2.4.3-r0 Fix: upgrade to 2.4.3-r0

Original advisory text

Security fix for CVE-2021-45960 applied in: expat 2.4.3-r0

Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details.

References

https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
https://osv.dev/vulnerability/CVE-2021-45960 URL
https://nvd.nist.gov/vuln/detail/CVE-2021-45960 URL

Timeline

Published18 Sep 2026

Updated18 Sep 2026

First seen18 Sep 2026

Sources

CLEANSTART-2026-CC51357 · OSV

Track software like this

Free during beta