Severity: Critical
CVSS Score: 9.8
petl before 1.68, in some configurations, allows resolution of entities in an XML document.