Uses vulnerable version 2.7.4 of libexpat
Author: hartworkCreated Sep 18, 2026Updated Sep 18, 2026
Hi!
I found a vulnerable outdated bundle of libexpat 2.7.4 in here at…
Based on a quick…
git diff R_2_7_4 R_2_8_4 -- Changes | grep '^+' | grep -o 'CVE-[0-9-]\+' | sed 's,^,- ,' | sort -u…I believe the list of unfixed CVEs is this, if you'd like to have a closer look:
- CVE-2026-32776
- CVE-2026-32777
- CVE-2026-32778
- CVE-2026-41080
- CVE-2026-45186
- CVE-2026-50219
- CVE-2026-56131
- CVE-2026-56132
- CVE-2026-56403
- CVE-2026-56404
- CVE-2026-56405
- CVE-2026-56406
- CVE-2026-56407
- CVE-2026-56408
- CVE-2026-56409
- CVE-2026-56410
- CVE-2026-56411
- CVE-2026-56412
- CVE-2026-66046
- CVE-2026-72522
- CVE-2026-76641
- CVE-2026-76956
- CVE-2026-76957
Are you aware of this issue?
Best, Sebastian
PS: The next release of Expat is likely upcoming next week.
Source: wxWidgets/wxWidgets