Description Osmand through 2.0.0 allow XXE because of binary/BinaryMapIndexReader.java. References https://github.com/osmandapp/Osmand/issues/8711