XML External Entities (XXE)

jsbml-core is vulnerable to XML External Entities XXE attacks. The vulnerability exists as external entities are not disabled by default in SBML files, allowing an attacker to load and retrieve system files such as /etc/passwd...