In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks.Referenceshttps://github.com/traccar/traccar/commit/d7f6c53fd88635885914013649b6807ec53227bfhttps://www.traccar.org/blog/