Homepage
  1. Snyk Vulnerability Database
  2. Linux
  3. rhel
  4. rhel:10
  5. expat

expat

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the expat package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Allocation of Resources Without Limits or Throttling

<0:2.7.5-1.hum1
  • L
Insufficient Entropy

*
  • L
Insufficient Entropy

*
  • M
NULL Pointer Dereference

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
NULL Pointer Dereference

*
  • L
NULL Pointer Dereference

*
  • L
Algorithmic Complexity

*
  • L
Algorithmic Complexity

*
  • H
Allocation of Resources Without Limits or Throttling

<0:2.7.1-1.el10_1.3
  • H
Allocation of Resources Without Limits or Throttling

<0:2.7.1-1.el10_0.3
  • M
Integer Overflow or Wraparound

*
  • M
Uncontrolled Recursion

<0:2.7.1-1.el10_0
  • L
Integer Overflow or Wraparound

*
  • M
Insufficient Entropy

*
  • M
Insufficient Entropy

*
  • M
Insufficient Entropy

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Memory Leak

*
  • M
Memory Leak

*
  • M
Memory Leak

*
  • M
Memory Leak

*
  • M
Memory Leak

*
  • M
Memory Leak

*
  • M
Use of Insufficiently Random Values

*
  • M
Use of Insufficiently Random Values

*
  • M
Use of Insufficiently Random Values

*
  • M
Algorithmic Complexity

*
  • M
Algorithmic Complexity

*
  • M
Algorithmic Complexity

*
  • M
Algorithmic Complexity

*
                
Product
  • Partners
  • Developers & Devops Features
  • Enterprise Features
  • Pricing
  • Test with GitHub
  • Test with CLI
  • API status
Resources
  • Vulnerability DB
  • Blog
  • Documentation
  • FAQs
Company
  • About
  • Jobs
  • Contact
  • Legal terms
  • Privacy
  • Press kit
  • Events
Contact us
  • Support
  • Report a new vuln

Find us online

Track our development

DevSecOps Community Podcast

© 2026 Snyk Ltd.