CVE-2026-41080

LOW NVD

CVSS Score 2.9

Severity LOW

Published Apr 16, 2026

Vendor unknown

Description

libexpat before 2.7.6 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.