CVE-2026-56408

LLM-synthesized narrative grounded in this CVE's description and references.

• osv-coords7 versions

  pkg:apk/chainguard/libexpat1pkg:apk/wolfi/expatpkg:rpm/opensuse/expat&distro=openSUSE%20Tumbleweedpkg:apk/wolfi/expat-devpkg:apk/chainguard/expatpkg:apk/wolfi/libexpat1pkg:apk/chainguard/expat-dev

  < 2.8.2-r0+ 6 more

  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-1.1
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
  • (no CPE)range: < 2.8.2-r0
• Libexpat Project/Libexpat2 versions

  cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*range: <2.8.2
  • (no CPE)range: <2.8.2

• github.com/libexpat/libexpat/commit/16e2efd867ea8567ffa012210b52ef5918e20817nvdPatch

• Libexpat: Ten Integer Overflow and Use-After-Free Vulnerabilities Disclosed Together
  Vypr Intelligence · Jun 21, 2026