CVE-2026-245152026-01-23In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.