Expat 2.8.1 released, CVE-2026-45186 and CVSS unreliability
blog.hartwork.org