CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 28/11/2025 |
| CVE-2025-59375 | 高危7.5 | libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing. | 15/09/2025 |
| CVE-2024-50602 | 中危5.9 | An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. | 27/10/2024 |
| CVE-2024-45492 | 严重9.8 | An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). | 30/08/2024 |
| CVE-2024-45491 | 严重9.8 | An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX). | 30/08/2024 |
| CVE-2024-45490 | 高危7.5 | An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. | 30/08/2024 |
| CVE-2024-28757 | 高危7.5 | libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate). | 10/03/2024 |
| CVE-2023-52426 | 中危5.5 | libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time. | 04/02/2024 |
| CVE-2023-52425 | 高危7.5 | libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed. | 04/02/2024 |
| CVE-2022-43680 | 高危7.5 | In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations. | 24/10/2022 |
| CVE-2022-40674 | 高危8.1 | libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. | 14/09/2022 |
| CVE-2022-25315 | 严重9.8 | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. | 18/02/2022 |
| CVE-2022-25314 | 高危7.5 | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString. | 18/02/2022 |
| CVE-2022-25313 | 中危6.5 | In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element. | 18/02/2022 |
| CVE-2022-25236 | 严重9.8 | xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs. | 16/02/2022 |
| CVE-2022-25235 | 严重9.8 | xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context. | 16/02/2022 |
| CVE-2022-23990 | 高危7.5 | Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function. | 26/01/2022 |