← Back to browse · API

CVE-2022-25236

Severity
CRITICAL
CVSS
9.8
EPSS
0.35867
Risk score
51.75
CISA KEV
No
PoC
No
Published
2022-02-16
Modified
2025-05-05
First seen
2026-08-07
Aliases
EUVD-2022-29934, GHSA-3C6C-GJPG-QQ92
Products
n/a:n/a n/a
Sources
euvd EUVD-2022-29934

Description

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.

References