CVE-2022-48565: python: XML External Entity in XML processing plistlib module
Severity: Critical
CVSS Score: 9.8
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.