https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T13:57:14.114041+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bell-cve-2026-76956 BELL-CVE-2026-76956 2026-09-29T13:57:14.122438+00:00

Affected: Alpaquita:23: expat, Alpaquita:25: expat, Alpaquita:stream: expat, BellSoft Hardened Containers:23: expat, BellSoft Hardened Containers:25: expat, BellSoft Hardened Containers:stream: expat

 https://vulnerability.circl.lu/vuln/fkie_cve-2026-76956 fkie_cve-2026-76956 2026-09-29T13:57:14.122542+00:00

In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.

 https://vulnerability.circl.lu/vuln/ghsa-x282-q22w-c9hm GHSA-x282-q22w-c9hm 2026-09-29T13:57:14.122613+00:00

In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.

 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11733-1 openSUSE-SU-2026:11733-1 — expat-2.8.4-1.1 on GA media 2026-09-29T13:57:14.122644+00:00

expat-2.8.4-1.1 on GA media

 https://vulnerability.circl.lu/vuln/rhsa-2026:60451 RHSA-2026:60451 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-09-29T13:57:14.122679+00:00

libexpat: libexpat: Denial of Service via hash flooding attack with crafted XML libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-76956 UBUNTU-CVE-2026-76956 2026-09-29T13:57:14.122710+00:00

Affected: Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: cadaver, Ubuntu:Pro:16.04:LTS: coin3, Ubuntu:16.04:LTS: gdcm, Ubuntu:16.04:LTS: insighttoolkit4 and 50 more

In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.