An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities. CREATE(Triage):(User=admin) CVE-2022-48565 (https://nvd.nist.gov/vuln/detail/CVE-2022-48565)
