| Package | Affected versions | Patched versions |
|---|---|---|
| libexpat | < 2.2.0 | 2.2.0 |
Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free