Improper Restriction of XML External Entity Reference in python-docx

python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted document...