CVE-2026-56403

LLM-synthesized narrative grounded in this CVE's description and references.

• Libexpat Project/Libexpatinferred2 versions

  <2.8.2+ 1 more

  • (no CPE)range: <2.8.2
  • (no CPE)range: <2.8.2
• osv-coords8 versions

  pkg:apk/chainguard/expatpkg:apk/chainguard/expat-devpkg:apk/chainguard/expat-docpkg:apk/chainguard/libexpat1pkg:apk/wolfi/expatpkg:apk/wolfi/expat-devpkg:apk/wolfi/expat-docpkg:apk/wolfi/libexpat1

  < 2.8.2-r0+ 7 more

  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0

• github.com/libexpat/libexpat/pull/1232nvdPatch

• Libexpat: Ten Integer Overflow and Use-After-Free Vulnerabilities Disclosed Together
  Vypr Intelligence · Jun 21, 2026