Back to catalog

DEBIAN-CVE-2025-66382 - debian/expat

In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time.

CWE-407 / CVSS 2.9 (LOW)

Evidence
  • imported from OSV Debian, untriaged
History
  • 2026-10-28: pending-human-approval - bulk import