In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-75216.json"