RHSA-2025:22785: expat Red Hat

CVSS: 9.8v3.1CriticalPublished

Published 05-12-2025Last modified 15-10-2026

Open JSON

Vulnerability summary

RHSA-2025:22785 is a critical (CVSS 9.8) vulnerability in expat Red Hat.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 16 · Downstream 0

CVE-2013-0340 CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824+10 more

Timeline

05-12-2025
PublishedVulnerability first disclosed.
15-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: expat security update

CVSS metrics

1 score · 1 source · 1 version

v3.19.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat1 product

expat< 0:2.2.10-1.el8_4

1 vendor · 1 product

References

76 links

Show all 76 references

bugzilla.redhat.com/show_bug.cgi?id=2044488REPORT
bugzilla.redhat.com/show_bug.cgi?id=2048356REPORT
bugzilla.redhat.com/show_bug.cgi?id=2056350REPORT
bugzilla.redhat.com/show_bug.cgi?id=2056354REPORT
bugzilla.redhat.com/show_bug.cgi?id=2140059REPORT
bugzilla.redhat.com/show_bug.cgi?id=2262877REPORT
bugzilla.redhat.com/show_bug.cgi?id=2310137REPORT
bugzilla.redhat.com/show_bug.cgi?id=2395108REPORT
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22785.jsonAdvisory
access.redhat.com/security/cve/CVE-2013-0340REPORT
www.cve.org/CVERecord?id=CVE-2013-0340Advisory
nvd.nist.gov/vuln/detail/CVE-2013-0340Advisory
access.redhat.com/security/cve/CVE-2021-45960REPORT
www.cve.org/CVERecord?id=CVE-2021-45960Advisory
nvd.nist.gov/vuln/detail/CVE-2021-45960Advisory
github.com/libexpat/libexpat/issues/531ARTICLE
access.redhat.com/security/cve/CVE-2021-46143REPORT
www.cve.org/CVERecord?id=CVE-2021-46143Advisory
nvd.nist.gov/vuln/detail/CVE-2021-46143Advisory
github.com/libexpat/libexpat/issues/532ARTICLE
access.redhat.com/security/cve/CVE-2022-22822REPORT
www.cve.org/CVERecord?id=CVE-2022-22822Advisory
nvd.nist.gov/vuln/detail/CVE-2022-22822Advisory
github.com/libexpat/libexpat/pull/539ARTICLE
access.redhat.com/security/cve/CVE-2022-22823REPORT
www.cve.org/CVERecord?id=CVE-2022-22823Advisory
nvd.nist.gov/vuln/detail/CVE-2022-22823Advisory
access.redhat.com/security/cve/CVE-2022-22824REPORT
www.cve.org/CVERecord?id=CVE-2022-22824Advisory
nvd.nist.gov/vuln/detail/CVE-2022-22824Advisory
access.redhat.com/security/cve/CVE-2022-22825REPORT
www.cve.org/CVERecord?id=CVE-2022-22825Advisory
nvd.nist.gov/vuln/detail/CVE-2022-22825Advisory
access.redhat.com/security/cve/CVE-2022-22826REPORT
www.cve.org/CVERecord?id=CVE-2022-22826Advisory
nvd.nist.gov/vuln/detail/CVE-2022-22826Advisory
access.redhat.com/security/cve/CVE-2022-22827REPORT
www.cve.org/CVERecord?id=CVE-2022-22827Advisory
nvd.nist.gov/vuln/detail/CVE-2022-22827Advisory
access.redhat.com/security/cve/CVE-2022-23990REPORT
www.cve.org/CVERecord?id=CVE-2022-23990Advisory
nvd.nist.gov/vuln/detail/CVE-2022-23990Advisory
access.redhat.com/security/cve/CVE-2022-25313REPORT
www.cve.org/CVERecord?id=CVE-2022-25313Advisory
nvd.nist.gov/vuln/detail/CVE-2022-25313Advisory
blog.hartwork.org/posts/expat-2-4-5-released/ARTICLE
access.redhat.com/security/cve/CVE-2022-25314REPORT
www.cve.org/CVERecord?id=CVE-2022-25314Advisory
nvd.nist.gov/vuln/detail/CVE-2022-25314Advisory
access.redhat.com/security/cve/CVE-2022-43680REPORT
www.cve.org/CVERecord?id=CVE-2022-43680Advisory
nvd.nist.gov/vuln/detail/CVE-2022-43680Advisory
github.com/libexpat/libexpat/issues/649ARTICLE
access.redhat.com/security/cve/CVE-2023-52425REPORT
www.cve.org/CVERecord?id=CVE-2023-52425Advisory
nvd.nist.gov/vuln/detail/CVE-2023-52425Advisory
access.redhat.com/security/cve/CVE-2024-8176REPORT
www.cve.org/CVERecord?id=CVE-2024-8176Advisory
nvd.nist.gov/vuln/detail/CVE-2024-8176Advisory
github.com/libexpat/libexpat/issues/893ARTICLE
github.com/libexpat/libexpat/pull/973ARTICLE
access.redhat.com/security/cve/CVE-2025-59375REPORT
www.cve.org/CVERecord?id=CVE-2025-59375Advisory
nvd.nist.gov/vuln/detail/CVE-2025-59375Advisory
www.mozilla.org/security/advisories/mfsa2026-22/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-24/ARTICLE