An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
2.7.18-1~20.04.73.9.5-3~20.04.12.7.18-13ubuntu1.52.7.6-8ubuntu0.6+esm163.4.0-13.4.0-2ubuntu13.4.0-2ubuntu1.13.4.3-1ubuntu1~14.04.13.4.3-1ubuntu1~14.04.33.4.3-1ubuntu1~14.04.43.4.3-1ubuntu1~14.04.53.4.3-1ubuntu1~14.04.63.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm10+24 more3.5.2-2ubuntu0~16.04.4~14.04.1+esm12.7.12-1ubuntu0~16.04.18+esm63.5.2-2ubuntu0~16.04.13+esm92.7.17-1~18.04ubuntu1.13+esm13.6.9-1~18.04ubuntu1.13+esm2Exploitability
AV:NAC:LPR:NUI:NScope
S:UImpact
C:HI:HA:HCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H