DEBIAN-CVE-2026-24515 - debian/expat
In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.
CWE-476 / CVSS 2.9 (LOW)
Evidence
- imported from OSV Debian, untriaged
History
- 2026-10-28: pending-human-approval - bulk import