Advisories for Pypi/Petl package

petl before 1.68, in some configurations, allows resolution of entities in an XML document.

This advisory duplicates another.