We should push a minimal patch to fix the vulnerabilities first, that we can backport to stable branches. Then for Havana and beyond we should push defusedxml parsers across the board.
We should push a minimal patch to fix the vulnerabilities first, that we can backport to stable branches.
Then for Havana and beyond we should push defusedxml parsers across the board.