Description
### Impact
When generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the XML.
### Workarounds
Test untrusted input with `link` elements with `rel="attachment"` before processing.
### Credits
This vulnerability was reported by Mohamed Ouad from [Doyensec](https://doyensec.com/).
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | xml2rfc | < 3.30.1 | 3.30.1 | GHSA-cfmv-h8fx-85m7 |