CVE-2026-41080
libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.
Published Apr 16, 2026 · updated Jul 14, 2026 · libexpat project libexpat
libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Apr 16, 2026 · NIST NVD
Detected
libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.
Jul 14, 2026 · NIST NVD
Updated
libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.
Affected
- cpe libexpat project/libexpatversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-41080
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-41080
libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.
nvd.nist.gov