[MEDIUM] SS-2014-017: XML Quadratic Blowup Attack

PKSA-xhsq-x1jb-f31d GHSA-87pf-7x99-5xc4

Affected package: silverstripe/framework

Affected version: >=3.1.0,<3.1.12

Reported by:
GitHub, FriendsOfPHP/security-advisories