All 34 CVE vulnerabilities found in libexpat, with AI-generated Chinese analysis, references, and POCs.
This page aggregates security advisories and vulnerability reports specifically for the libexpat XML parsing library developed by the Expat project, categorized under various weakness types such as buffer overflows and XML entity expansion issues. The collection encompasses historical and recent findings spanning from the library's initial release in the late 1990s through the most current patch cycles, providing a comprehensive timeline of identified security flaws. Visitors can utilize this resource to track official vendor advisories, understand the prevalence and impact of specific weakness classes like improper input validation within XML parsers, or examine the complete vulnerability history of the libexpat product to assess long-term security posture. The data presented here serves as a centralized reference for security researchers, system administrators, and developers who need to verify the status of known issues or correlate specific weaknesses with affected library versions without navigating disparate sources. By consolidating these records, the page facilitates efficient risk assessment and helps organizations maintain accurate inventories of potential threats associated with their XML processing dependencies. All entries are sourced from trusted public databases and vendor announcements, ensuring the information remains factual and directly relevant to the technical community managing this widely used open-source component.
Vendor: libexpat project
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-25210 | libexpat 输入验证错误漏洞 CWE-190 | 6.9 | Medium | 2026-01-30 |
| CVE-2026-24515 | libexpat 代码问题漏洞 CWE-476 | 2.9 | Low | 2026-01-23 |
| CVE-2025-66382 | libexpat 安全漏洞 CWE-407 | 2.9 | Low | 2025-11-28 |
| CVE-2025-59375 | Expat 安全漏洞 CWE-770 | 7.5 | High | 2025-09-15 |
All 34 known CVE vulnerabilities affecting libexpat with full Chinese analysis, references, and POCs where available.