Libexpat vulnerable to hash flooding attack

The fact

Identified on May 8, 2026, it can cause denial-of-service on affected systems.

A patch is available for users and developers.