- Packages tracked
- 38,394
- CVEs found
- 728
- Fixed in fork
- 13
- Fixed upstream
- 8
- In flight
- 6
- Pending
- 700
1 matching records
| CVE | Project | Title | Fork fix | State | Evidence | Discussion |
|---|---|---|---|---|---|---|
| DEBIAN-CVE-2026-66046 | debian/expat | Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an O(N^2) linear scan of elementType->defaultAtts to determine CDATA status | - | Awaiting approval | Evidence | None recorded |