Copyright © 2012 Red Hat, Inc. All rights reserved.
Moderate
2026-05-11T17:19:09
python: expat: Python/Expat: Denial of Service via crafted XML document
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-331
`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.
A flaw was found in the `python` and `expat` components. Insufficient entropy in the hash-flooding protection mechanism of `xml.parsers.expat` and `xml.etree.ElementTree` allows a remote attacker to craft a malicious XML document. This crafted document can trigger a hash flooding attack, leading to a denial of service (DoS) condition.
The impact from this flaw is limited to a denial of service in the Python runtime. Host Red Hat systems are not affected in their default configurations.
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Exploit Intelligence
Fix deferred
exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/model-opt-cuda-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/model-opt-cuda-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/vllm-cpu-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/vllm-cuda-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/vllm-neuron-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/vllm-rocm-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/vllm-spyre-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/vllm-tpu-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-cpu-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-cuda-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-gaudi-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-neuron-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-rocm-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-spyre-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-tpu-rhel9
Red Hat Enterprise Linux 10
Fix deferred
python3.12
Red Hat Enterprise Linux 10
Fix deferred
python3.14
Red Hat Enterprise Linux 6
Fix deferred
python
Red Hat Enterprise Linux 7
Fix deferred
python
Red Hat Enterprise Linux 7
Fix deferred
python3
Red Hat Enterprise Linux 8
Fix deferred
python3
Red Hat Enterprise Linux 8
Fix deferred
python3.12
Red Hat Enterprise Linux 8
Fix deferred
python36:3.6/python36
Red Hat Enterprise Linux 9
Fix deferred
python3.12
Red Hat Enterprise Linux 9
Fix deferred
python3.14
Red Hat Enterprise Linux 9
Fix deferred
python3.9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-aws-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-azure-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-azure-rocm-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-gaudi-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-gcp-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-rocm-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-cpu-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-cuda-12.9-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-cuda-13.0-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-gaudi-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-neuron-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-rocm-6.4-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-rocm-7.0-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-rocm-7.1-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-spyre-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-tpu-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-automl-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-autorag-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-built-in-detector-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-caikit-nlp-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-caikit-tgis-serving-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-dashboard-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-feature-server-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-guardrails-detector-huggingface-runtime-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-kserve-autogluon-server-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-kserve-storage-initializer-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-llama-stack-core-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-llm-d-inference-scheduler-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-llm-d-kv-cache-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-llm-d-routing-sidecar-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-mlflow-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-ml-pipelines-api-server-v2-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-ml-pipelines-runtime-generic-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-mlserver-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-modelmesh-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-modelmesh-runtime-adapter-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-model-registry-job-async-upload-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-must-gather-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-openvino-model-server-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipelines-components-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-rhaii-cluster-validator-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-rhaii-validator-tools-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-spark-operator-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-th06-cpu-torch210-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-th06-cpu-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-th06-cuda130-torch210-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-th06-cuda130-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-th06-rocm64-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-training-rocm64-torch29-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-trustyai-nemo-guardrails-server-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-trustyai-service-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-vllm-gaudi-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/rhai-cli-rhel9
https://www.cve.org/CVERecord?id=CVE-2026-7210
https://nvd.nist.gov/vuln/detail/CVE-2026-7210
https://github.com/python/cpython/issues/149018
https://github.com/python/cpython/pull/149023
https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/