libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate). CREATE(Triage):(User=admin) CVE-2024-28757 (https://nvd.nist.gov/vuln/detail/CVE-2024-28757)
