Here are expat vulnerabilities:
https://access.redhat.com/security/cve/cve-2022-23990
https://access.redhat.com/security/cve/cve-2022-43680
Does each CVE have any impact on CA API Gateway v10.X? If so, please let me know the resolution (patch release) as well.
Release : 10.0, 10.1
Expat is a native stream-oriented XML parser library and API Gateway does not use this for XML parsing, so these CVEs do not affect Gateway.