CVE-2026-7210

Name of the Vulnerable Software and Affected Versions Python (affected versions not specified)

Description The xml.parsers.expat and xml.etree.ElementTree modules use insufficient entropy for Expat hash-flooding protection. This allows a specially crafted XML document to trigger hash flooding, a condition where many keys are mapped to the same hash bucket, significantly slowing down processing.

Recommendations Update libexpat to version 2.8.0 or later and apply the available software patch.