CVE-2026-76875 | PyPy up to 3.11.15/3.12.13 pyexpat module ExternalEntityParserCreate use after free

September 29, 2026 Yanac

A vulnerability classified as critical was found in PyPy up to 3.11.15/3.12.13. The affected element is the function ExternalEntityParserCreate of the component pyexpat module. Such manipulation leads to use after free.

This vulnerability is uniquely identified as CVE-2026-76875. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More