| Package | Affected versions | Patched versions |
|---|---|---|
| libexpat | < 2.8.2 | 2.8.2 |
In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free