[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffpC6NGW-M7oorHYL9wf8O09ppd5iAy8zGtN5d28hoSQ":3,"g5a-ex:libexpat_project\u002Flibexpat@*":235,"g5a-family:libexpat_project\u002Flibexpat":237},{"success":4,"data":5},true,{"product":6,"versions":106,"topVulnerabilitiesByEpss":151,"kevVulnerabilities":212,"seoMetadata":213,"meta":232},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":105},"libexpat_project","libexpat",44,40,0,"2025-09-15",[14,17,20,22,24,26,28,30,32,34,36,38,40,42,44,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.95.0",false,{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},"1.95.1",2,{"version":21,"cve_count":19,"kev_count":11,"has_kev":16},"1.95.2",{"version":23,"cve_count":11,"kev_count":11,"has_kev":16},"1.95.3",{"version":25,"cve_count":19,"kev_count":11,"has_kev":16},"1.95.4",{"version":27,"cve_count":19,"kev_count":11,"has_kev":16},"1.95.5",{"version":29,"cve_count":19,"kev_count":11,"has_kev":16},"1.95.6",{"version":31,"cve_count":19,"kev_count":11,"has_kev":16},"1.95.7",{"version":33,"cve_count":19,"kev_count":11,"has_kev":16},"1.95.8",{"version":35,"cve_count":19,"kev_count":11,"has_kev":16},"2.0.0",{"version":37,"cve_count":19,"kev_count":11,"has_kev":16},"2.0.1",{"version":39,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.0",{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.1",{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.0",{"version":45,"cve_count":46,"kev_count":11,"has_kev":16},"2.2.1",1,{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.10",{"version":50,"cve_count":46,"kev_count":11,"has_kev":16},"2.2.2",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.3",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.4",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.5",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.6",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.7",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.8",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.9",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.0",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.0",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.1",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.3",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.4",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.5",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.6",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.7",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.8",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.9",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"2.5.0",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.0",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.1",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.2",{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.3",{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.4",{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},"2.7.0",{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},"2.7.1",{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},"2.7.2",{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},"2.7.3","Libexpat by Libexpat Project is a technology product with 44 tracked versions and 40 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},{"version":21,"cve_count":19,"kev_count":11,"has_kev":16},{"version":23,"cve_count":11,"kev_count":11,"has_kev":16},{"version":25,"cve_count":19,"kev_count":11,"has_kev":16},{"version":27,"cve_count":19,"kev_count":11,"has_kev":16},{"version":29,"cve_count":19,"kev_count":11,"has_kev":16},{"version":31,"cve_count":19,"kev_count":11,"has_kev":16},{"version":33,"cve_count":19,"kev_count":11,"has_kev":16},{"version":35,"cve_count":19,"kev_count":11,"has_kev":16},{"version":37,"cve_count":19,"kev_count":11,"has_kev":16},{"version":39,"cve_count":11,"kev_count":11,"has_kev":16},{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},{"version":45,"cve_count":46,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":46,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},[152,160,168,173,179,184,189,196,202,207],{"cveId":153,"description":154,"publishedDate":155,"cvssScore":156,"cvssVersion":157,"severity":158,"isKev":16,"epssScore":159},"CVE-2022-25236","xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.","2022-02-16",9.8,"v3.1","Critical",0.35271,{"cveId":161,"description":162,"publishedDate":163,"cvssScore":164,"cvssVersion":165,"severity":166,"isKev":16,"epssScore":167},"CVE-2009-3720","The updatePosition function in lib\u002Fxmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.","2009-11-03",5,"v2","Medium",0.27924,{"cveId":169,"description":170,"publishedDate":171,"cvssScore":164,"cvssVersion":165,"severity":166,"isKev":16,"epssScore":172},"CVE-2009-3560","The big2_toUtf8 function in lib\u002Fxmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib\u002Fxmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.","2009-12-04",0.24313,{"cveId":174,"description":175,"publishedDate":176,"cvssScore":177,"cvssVersion":165,"severity":166,"isKev":16,"epssScore":178},"CVE-2013-0340","expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue.  NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE.","2014-01-21",6.8,0.19433,{"cveId":180,"description":181,"publishedDate":182,"cvssScore":177,"cvssVersion":165,"severity":166,"isKev":16,"epssScore":183},"CVE-2015-1283","Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.","2015-07-23",0.18439,{"cveId":185,"description":186,"publishedDate":187,"cvssScore":156,"cvssVersion":157,"severity":158,"isKev":16,"epssScore":188},"CVE-2016-0718","Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.","2016-05-26",0.13335,{"cveId":190,"description":191,"publishedDate":192,"cvssScore":193,"cvssVersion":157,"severity":194,"isKev":16,"epssScore":195},"CVE-2016-4472","The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.","2016-06-30",8.1,"High",0.11946,{"cveId":197,"description":198,"publishedDate":199,"cvssScore":200,"cvssVersion":157,"severity":194,"isKev":16,"epssScore":201},"CVE-2017-9233","XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.","2017-07-25",7.5,0.08739,{"cveId":203,"description":204,"publishedDate":205,"cvssScore":200,"cvssVersion":157,"severity":194,"isKev":16,"epssScore":206},"CVE-2018-20843","In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).","2019-06-24",0.07107,{"cveId":208,"description":209,"publishedDate":210,"cvssScore":200,"cvssVersion":157,"severity":194,"isKev":16,"epssScore":211},"CVE-2019-15903","In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.","2019-09-04",0.06643,[],{"title":214,"metaDescription":215,"keywords":216,"structuredData":217},"Libexpat by Libexpat Project - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Libexpat by Libexpat Project covering 44 versions with 40 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Libexpat vulnerabilities, Libexpat security, Libexpat CVE, Libexpat Project Libexpat, Libexpat threat intelligence, Libexpat Project security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":218,"@type":219,"name":220,"description":215,"url":221,"manufacturer":222,"applicationCategory":226,"softwareVersion":227,"mainEntity":228},"https:\u002F\u002Fschema.org","SoftwareApplication","Libexpat","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Flibexpat_project\u002Flibexpat",{"@type":223,"name":224,"url":225},"Organization","Libexpat Project","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flibexpat_project","Security Software","44 versions tracked",{"@type":229,"name":230,"description":231,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Libexpat Security Vulnerabilities","Security vulnerabilities affecting Libexpat by Libexpat Project",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":233,"apiVersion":234},"2026-10-17T14:25:39.957Z","3.0",{"rows":236,"total":11,"capped":16,"failed":11},[],[]]