CVE-2022-25236

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.

Date published : 2022-02-15

https://github.com/libexpat/libexpat/pull/561