Enhanced XML Security for Magento 2
Strict Compliantwubinworks/module-xml-security 60
Replaces Magento's Xml\Security class with a hardened version that correctly detects XML entities even when the input is not UTF-8 encoded under php-fpm, closing a potential XXE gap.