CVE-2025-66382: Libexpat Project Libexpat

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time.

Affected products

• Libexpat Project Libexpat: up to and including 2.7.3

Published 2025-11-28. Last modified 2026-06-17.