Expat 2.8.1 released, CVE-2026-45186 and CVSS unreliability | Dark Hacker News