VYPR
Low severity2.9OSV Advisory· Published Jan 23, 2026· Updated Jun 2, 2026

CVE-2026-24515

CVE-2026-24515

Description

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17

Patches

Vulnerability mechanics

References

2

News mentions

1