CVE-2026-56403

LLM-synthesized narrative grounded in this CVE's description and references.

• Libexpat Project/Libexpatinferred3 versions

  <2.8.2+ 2 more

  • (no CPE)range: <2.8.2
  • cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*range: <2.8.2
  • (no CPE)range: <2.8.2
• osv-coords9 versions

  pkg:apk/chainguard/expatpkg:apk/chainguard/expat-devpkg:apk/chainguard/expat-docpkg:apk/chainguard/libexpat1pkg:apk/wolfi/expatpkg:apk/wolfi/expat-devpkg:apk/wolfi/expat-docpkg:apk/wolfi/libexpat1pkg:rpm/opensuse/expat&distro=openSUSE%20Tumbleweed

  < 2.8.2-r0+ 8 more

  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-1.1

• github.com/libexpat/libexpat/pull/1232nvdPatch

• Libexpat: Ten Integer Overflow and Use-After-Free Vulnerabilities Disclosed Together
  Vypr Intelligence · Jun 21, 2026