Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-384

JLSEC-2026-384

SourceEditHistoryOSVJSON (OSV)
JLSEC Published
Modified
Affected Packages
Expat_jll < 2.8.0+0
Aliases / Upstream
CVE-2026-41080

libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

References