Known vulnerabilities in expat-doc

Vendor: OpenAnolis
Software: expat-doc
Software CPE: cpe:2.3:o:openanolis:expat-doc:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 21
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting expat-doc expat-doc is affected by 21 known vulnerabilities: 6 high, 14 medium, 1 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149949 - Inefficient Algorithmic Complexity
CVE-2026-45186		 CWE-407 Medium
No
No
 2.5.0-13 15.09.2026 SB2026091528
SB2026091538
SB2026091546
and 9 more
#VU144338 - Protection Mechanism Failure
CVE-2026-50219		 CWE-693 Medium
No
No
 2.5.0-14, 2.5.0-16 19.08.2026 SB2026081992
SB2026081995
SB2026081997
and 20 more
#VU144340 - Out-of-bounds write
CVE-2026-56132		 CWE-787 High
No
No
 2.5.0-17 19.08.2026 SB2026081992
SB2026081995
SB2026081997
and 9 more
#VU144341 - Integer overflow
CVE-2026-56403		 CWE-190 Medium
No
No
 2.5.0-18 19.08.2026 SB2026081992
SB2026081995
SB20260819116
and 6 more
#VU144343 - Integer overflow
CVE-2026-56405		 CWE-190 Medium
No
No
 2.5.0-16 19.08.2026 SB2026081992
SB2026081995
SB20260819116
and 6 more
#VU144344 - Integer overflow
CVE-2026-56406		 CWE-190 Medium
No
No
 2.5.0-16 19.08.2026 SB2026081992
SB2026081995
SB20260819116
and 6 more
#VU144350 - Protection Mechanism Failure
CVE-2026-56412		 CWE-693 Medium
Available
No
 2.5.0-16 19.08.2026 SB2026081992
SB2026081995
SB2026081997
and 13 more
#VU124278 - NULL Pointer Dereference
CVE-2026-32778		 CWE-476 Low
No
No
 2.5.0-12 24.03.2026 SB2026032435
SB2026033028
SB2026033199
and 18 more
#VU124277 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-32777		 CWE-835 Medium
No
No
 2.5.0-11 24.03.2026 SB2026032435
SB2026032436
SB2026032437
and 26 more
#VU124274 - NULL Pointer Dereference
CVE-2026-32776		 CWE-476 Medium
No
No
 2.5.0-11 24.03.2026 SB2026032435
SB2026032765
SB2026033028
and 23 more
#VU122268 - Integer overflow
CVE-2026-25210		 CWE-190 High
No
No
 2.5.0-9 03.02.2026 SB2026020364
SB20260205121
SB2026020611
and 23 more
#VU122267 - NULL Pointer Dereference
CVE-2026-24515		 CWE-476 Medium
No
No
 2.5.0-9 03.02.2026 SB2026020364
SB2026020367
SB2026020368
and 19 more
#VU115751 - Resource exhaustion
CVE-2025-59375		 CWE-400 Medium
No
No
 2.5.0-8 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 111 more
#VU105723 - Stack-based buffer overflow
CVE-2024-8176		 CWE-121 High
No
No
 2.5.0-5 14.03.2025 SB2025031426
SB2025031429
SB2025031430
and 105 more
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 2.5.0-4 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU96899 - Integer overflow
CVE-2024-45492		 CWE-190 High
No
No
 2.5.0-4 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 108 more
#VU96898 - Integer overflow
CVE-2024-45491		 CWE-190 High
No
No
 2.5.0-4 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 106 more
#VU96897 - Buffer Underwrite ('Buffer Underflow')
CVE-2024-45490		 CWE-124 High
No
No
 2.5.0-4 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 113 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757		 CWE-611 Medium
No
No
 2.5.0-4 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 75 more
#VU86231 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2023-52426		 CWE-776 Medium
No
No
 2.5.0-6 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 23 more


Showing elements 1 - 20 out of 21