libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-34208.json"