https://nvd.nist.gov/vuln/detail/CVE-2026-32776

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

NOTE: This is an automated issue created based on the library metadata. Osquery may or may not be affected.