CVE-2016-5851

python-docx before 0.8.6 is vulnerable to XML External Entity (XXE) attacks via a crafted Word document. The issue affects the python-docx library and is resolved by upgrading to 0.8.6 or later. The provided sources confirm the flaw and its remediation path; no exploitation details are included i...