l
libexpat project
Security Risk Profile
51
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 68 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 17, 2009 to present
68
Total CVEs
39
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
7.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
51/100
medium
📈 4 in Last 30 Days
Severity Distribution
Critical
11High
28Medium
28Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
6Age Distribution
Common Weaknesses (CWE)
1
Integer Overflow
27
2
Use After Free
9
3
Buffer Overflow
7
4
Null Pointer Dereference
4
5
Input Validation
4
Most Affected Products
1. alpine/expat273
2. debian/expat133
3. Libexpat Project Libexpat86
4. redhat/expat83
5. Debian Debian Linux45
Recent Vulnerabilities
See more →CVE-2026-118370
CVSS 8.2high
libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes
Oct 28, 2026
CVE-2026-117610
CVSS 8.2high
libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser
Oct 28, 2026
CVE-2026-115506
CVSS 8.7high
libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay
Oct 22, 2026
CVE-2026-113351
CVSS 8.2high
libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset
Oct 20, 2026
CVE-2026-76957
CVSS 7.8high
Aug 20, 2026
CVE-2026-76956
CVSS 7.5high
Aug 20, 2026
CVE-2026-66046
CVSS 8.7high
Expat Denial of Service via storeAtts() Quadratic Complexity
Aug 18, 2026
CVE-2026-56412
CVSS 5.9medium
Jun 21, 2026
CVE-2026-56411
CVSS 6.9medium
Jun 21, 2026
CVE-2026-56410
CVSS 6.9medium
Jun 21, 2026
Monitor libexpat project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.