Root has patched CVE-2023-52425 in the rootio-expat package for Root:Debian:bookworm. Multiple fixed versions available.
{ "distro": "debian", "distro_version": "bookworm", "source": "Root" }
[ "2.5.0-1+deb12u1.root.io.2" ]
"root.io.2"
true
"https://api.root.io/external/osv/ROOT-OS-DEBIAN-bookworm-CVE-2023-52425.json"
1
"2.5.0-1+deb12u1"