https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 13:57:12 +0000 https://vulnerability.circl.lu/vuln/bell-cve-2026-76956 <p><strong>Affected:</strong> Alpaquita:23: expat, Alpaquita:25: expat, Alpaquita:stream: expat, BellSoft Hardened Containers:23: expat, BellSoft Hardened Containers:25: expat, BellSoft Hardened Containers:stream: expat</p> <p><strong>Affected:</strong> Alpaquita:23: expat, Alpaquita:25: expat, Alpaquita:stream: expat, BellSoft Hardened Containers:23: expat, BellSoft Hardened Containers:25: expat, BellSoft Hardened Containers:stream: expat</p> https://vulnerability.circl.lu/vuln/bell-cve-2026-76956 https://vulnerability.circl.lu/vuln/fkie_cve-2026-76956 <p>In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy&#39;s return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.</p> <p>In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy&#39;s return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-76956 https://vulnerability.circl.lu/vuln/ghsa-x282-q22w-c9hm <p>In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy&#39;s return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.</p> <p>In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy&#39;s return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.</p> https://vulnerability.circl.lu/vuln/ghsa-x282-q22w-c9hm https://vulnerability.circl.lu/vuln/opensuse-su-2026:11733-1 <p>expat-2.8.4-1.1 on GA media</p> <p>expat-2.8.4-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11733-1 https://vulnerability.circl.lu/vuln/rhsa-2026:60451 <p>libexpat: libexpat: Denial of Service via hash flooding attack with crafted XML libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service</p> <p>libexpat: libexpat: Denial of Service via hash flooding attack with crafted XML libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service</p> https://vulnerability.circl.lu/vuln/rhsa-2026:60451 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-76956 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: cadaver, Ubuntu:Pro:16.04:LTS: coin3, Ubuntu:16.04:LTS: gdcm, Ubuntu:16.04:LTS: insighttoolkit4 and 50 more</p> <p>In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy&#39;s return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: cadaver, Ubuntu:Pro:16.04:LTS: coin3, Ubuntu:16.04:LTS: gdcm, Ubuntu:16.04:LTS: insighttoolkit4 and 50 more</p> <p>In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy&#39;s return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-76956