CVE-2026-7210

Name
CVE-2026-7210
Description
`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
cna@python.org https://github.com/python/cpython/issues/149018
cna@python.org https://github.com/python/cpython/pull/149023
cna@python.org https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/
af854a3a-2127-422b-91ae-364da2661108 http://www.openwall.com/lists/oss-security/2026/05/11/8
af854a3a-2127-422b-91ae-364da2661108 http://www.openwall.com/lists/oss-security/2026/05/11/13
cna@python.org https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4
cna@python.org https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566
cna@python.org https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a
cna@python.org https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f
cna@python.org https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b
cna@python.org https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56
cna@python.org https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:* libexpat >= None < 2.8.0
cpe:2.3:a:python:python:*:*:*:*:*:*:*:* python >= None < 3.15.0
cpe:2.3:a:python:python:*:*:*:*:*:*:*:* python >= None < 3.13.14
cpe:2.3:a:python:python:*:*:*:*:*:*:*:* python >= 3.14.0 < 3.14.6

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
python3 edge-main 3.14.7-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
python3 3.24-main 3.14.7-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
python3 3.23-main 3.12.14-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
python3 3.22-main 3.12.14-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
python3 3.21-main 3.12.14-r0 Natanael Copa <ncopa@alpinelinux.org> fixed