libexpat gets Munich funding: what a “security vacation” changes for XML parsing
libexpat (Expat) is a stream-oriented C XML parser used broadly in open source. After a “security vacation” ended on 2026-08-01, funded maintenance aims to fix unfixed security issues and improve standards support like XML 1.0r5.