Security: harden user-import XML parsing against XXE#8609

Merged

AngelFQC merged 2 commits into

security/auto-fix-GHSA-h24x-xw47-2wwx

Jun 17, 2026

Commits on Jun 17, 2026

Security: harden user-import XML parsing against XXE (GHSA-h24x-xw47-2wwx)

AngelFQC
and
claude
committed
Security: harden remaining XML import parsers against XXE

AngelFQC
and
claude
committed