An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. CREATE(Triage):(User=admin) CVE-2024-45490 (https://nvd.nist.gov/vuln/detail/CVE-2024-45490)