Launchpad.net

CVE 2017-1000190

SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on.

See the CVE page on Mitre.org for more details.