CVE-2026-24515
Severity
Critical
CVSS score
2.5Package
expatAffected versions
>= 2.7.0-any1, < 2.7.3-2In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.
In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.