GHSA-93f7-2j6h-9wwg: XML external entity vulnerability in the openEQUELLA SOAP API

Before openEQUELLA 2026.1, the SOAP API processes XML supplied to the stopEdit operation with a parser that resolves external entities. This may allow an attacker to read arbitrary files accessible to the openEQUELLA service or cause the server to make requests to attacker-specified locations (SSRF).