The current version of Expat is 2.9.0 (as of 06/10/2026). patchletter checks the official source daily and emails you new releases.
BSI security advisories
Advisories the German BSI (CERT-Bund) published for this product. Whether your version is affected is stated in the advisory itself.
- expat: Schwachstelle ermöglicht Denial of Service
WID-SEC-W-2026-2906 · 9 Oct
- libexpat: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
WID-SEC-W-2026-2025 · 9 Oct
- expat: Schwachstelle ermöglicht Manipulation von Daten
WID-SEC-W-2026-3482 · 9 Oct
- expat: Schwachstelle ermöglicht Offenlegung von Informationen
WID-SEC-W-2026-3796 · 8 Oct
- expat: Schwachstelle ermöglicht Denial of Service
WID-SEC-W-2026-1448 · 8 Oct
- expat: Mehrere Schwachstellen
WID-SEC-W-2026-2008 · 2 Oct
- expat: Schwachstelle ermöglicht Denial of Service
WID-SEC-W-2025-0562 · 2 Oct
- expat: Schwachstelle ermöglicht Codeausführung
WID-SEC-W-2026-0265 · 1 Oct
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 2.9.0 | STABLE | 06/10/2026 | Release notes → |
| 2.8.5 | STABLE | 23/09/2026 | Release notes → |
| 2.8.4 | STABLE | 01/09/2026 | Release notes → |
| 2.8.3 | STABLE | 11/08/2026 | Release notes → |
| 2.8.2 | STABLE | 10/08/2026 | Release notes → |
Frequently asked questions
- What is the latest version of Expat?
- Expat 2.9.0, released 06/10/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the Expat release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new Expat updates?
- Tick Expat off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.
An email as soon as a new Expat version ships
We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.
Embed this badge
The badge shows the current Expat version and keeps it up to date. Anyone may embed it, no account needed.
[](https://patchletter.com/en/software/expat)https://patchletter.com/badge/expat.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
