{"vulnerability": "cve-2026-76956", "sightings": [{"uuid": "6f051880-7963-43bc-a8ab-60ecc8ffae47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76956", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtioeodmjb2q", "content": "libexpat 2.8.2, 2.8.3 \u306f\u3001getentropy \u306e\u8fd4\u308a\u5024\u306e\u8aa4\u89e3\u306b\u3088\u308a\u3001\u4e0d\u5341\u5206\u306a\u30a8\u30f3\u30c8\u30ed\u30d4\u30fc\u3067\u30cf\u30c3\u30b7\u30e5\u30d5\u30e9\u30c3\u30c7\u30a3\u30f3\u30b0\u653b\u6483\u306b\u8106\u5f31\u3002\u60aa\u610f\u306e\u3042\u308bXML\u3067\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u306e\u53ef\u80fd\u6027\u3002\nCVE-2026-76956 CVSS 7.5 | HIGH", "creation_timestamp": "2026-08-20T07:01:04.123784Z"}, {"uuid": "99c380dd-9ab6-4dc1-9635-a27992899387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76956", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtjg5rms7n25", "content": "CVE-2026-76956 - DoS in libexpat 2.8.2/2.8.3. Insufficient entropy from getentropy handling enables hash flooding via crafted XML. CVSS 7.5. No patch yet, upgrade to 2.8.4. #CVE #libexpat #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-76956/", "creation_timestamp": "2026-08-20T14:06:42.222281Z"}, {"uuid": "e7fc65e3-aaed-4413-990c-d0732af1d55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76956", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117128219987979184", "content": "CVE-2026-76956 - DoS in libexpat 2.8.2/2.8.3. Insufficient entropy from getentropy handling enables hash flooding via crafted XML. CVSS 7.5. No patch yet, upgrade to 2.8.4. #CVE #libexpat #infosec\nhttps://www.valtersit.com/cve/CVE-2026-76956/", "creation_timestamp": "2026-08-20T14:07:33.077401Z"}, {"uuid": "508ad5e3-335b-4ab7-9aec-c4d992a80827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76956", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mug4jbqq7n2q", "content": "3/4\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-76956\n  (* Security fix *)\nl/highway-1.4.0-x86_64-1.txz:  Added.\n  Needed by kquickimageeditor-0.7.0 and libjxl-0.12.0.\nl/libcupsfilters-2.2.1-x86_64-1.txz:  Upgraded.\nl/libjxl-0.12.0-x86_64-1.txz:  Added.", "creation_timestamp": "2026-09-01T00:01:23.909688Z"}]}