GHSA-wm22-jw4m-rfcf: Out-of-Bounds Read Vulnerability in libexpat

libexpat through version 2.10.0 contains a vulnerability in unknown_toUtf8() and unknown_toUtf16() in xmltok.c when handling application-registered unknown encodings.