news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-24515

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
2.5 Low
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Risk score
20.0
Published
2026-01-23
Status
Modified

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.

Weaknesses

CWE-476

Coverage 2

Advisories and references