CVE-2021-29421

CVE-2021-29421 affects the Python library pikepdf (models/metadata.py) from 1.3.0 through 2.9.2, due to XXE when parsing XMP metadata entries. The issue is documented across multiple sources; a fix is available in pikepdf 2.10.0 and later. Upgrading to >= 2.10.0 is the recommended remediation....