but in the documentation its written that it is vulnerable https://docs.python.org/3.10/library/xml.html#xml-vulnerabilities