libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CREATE(Triage):(User=admin) CVE-2022-40674 (https://nvd.nist.gov/vuln/detail/CVE-2022-40674)