In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks.
No related bugs.