Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-7210

Опубликовано: 11 мая 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Версия до 3.13.14 (исключая)
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Версия от 3.14.0 (включая) до 3.14.6 (исключая)
cpe:2.3:a:python:python:3.15.0:alpha1:*:*:*:*:*:*
cpe:2.3:a:python:python:3.15.0:alpha2:*:*:*:*:*:*
cpe:2.3:a:python:python:3.15.0:alpha3:*:*:*:*:*:*
cpe:2.3:a:python:python:3.15.0:alpha4:*:*:*:*:*:*
cpe:2.3:a:python:python:3.15.0:alpha5:*:*:*:*:*:*
cpe:2.3:a:python:python:3.15.0:alpha6:*:*:*:*:*:*
cpe:2.3:a:python:python:3.15.0:alpha7:*:*:*:*:*:*
cpe:2.3:a:python:python:3.15.0:alpha8:*:*:*:*:*:*
cpe:2.3:a:python:python:3.15.0:beta1:*:*:*:*:*:*

EPSS

Процентиль: 52%
0.0079
Низкий

7.5 High

CVSS3

Дефекты

CWE-331

Связанные уязвимости

ubuntu логотип

CVE-2026-7210

CVSS3: 7.5
ubuntu
3 месяца назад

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

redhat логотип

CVE-2026-7210

CVSS3: 5.3
redhat
3 месяца назад

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

msrc логотип

CVE-2026-7210

msrc
3 месяца назад

The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

debian логотип

CVE-2026-7210

CVSS3: 7.5
debian
3 месяца назад

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entro ...

github логотип

GHSA-wxv8-w48j-r2f4

CVSS3: 9.8
github
3 месяца назад

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

EPSS

Процентиль: 52%
0.0079
Низкий

7.5 High

CVSS3

Дефекты

CWE-331