XMLReader.php in PHPOffice Common before 0.2.9 allows XXE.Referenceshttps://github.com/PHPOffice/Common/releases/tag/0.2.9https://github.com/PHPOffice/PHPWord/issues/1421https://github.com/PHPOffice/Common/pull/23
