CVE-2026-327772026-03-16libexpat before 2.7.5 allows an infinite loop while parsing DTD content.libexpat before 2.7.5 allows an infinite loop while parsing DTD content.