CVE-2026-564102026-06-21xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.