ultimate-sitemap-parser: XML Entity Expansion DoS Vulnerability

XMLSitemapParser uses Python's xml.parsers.expat without restricting DTD declarations or recursive entity references, allowing unbounded CPU and memory consumption via XML Entity Expansion (Billion Laughs) DoS.

Any application using ultimate-sitemap-parser to parse attacker-controlled XML sitemaps, including web crawlers, CI/CD pipelines, and monitoring tools.

Upgrade ultimate-sitemap-parser to a patched version or apply workaround by using defusedxml or rejecting DOCTYPE declarations before parsing.