SimpleXML has XML External Entity (XXE) vulnerability

SimpleXML latest version 2.7.1 is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on...