From 3c3232cdcab174cff5049fd3c80ef2f7289ca530 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Thu, 6 Aug 2026 00:23:17 +0000
Subject: [PATCH] fix: V-001 security vulnerability

Automated security fix generated by OrbisAI Security
---
 binding/xml.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/binding/xml.go b/binding/xml.go
index acd6f942..85f9af2a 100644
--- a/binding/xml.go
+++ b/binding/xml.go
@@ -27,6 +27,7 @@ func (xmlBinding) BindBody(body []byte, obj any) error {
 
 func decodeXML(r io.Reader, obj any) error {
 	decoder := xml.NewDecoder(r)
+	decoder.Entity = map[string]string{}
 	if err := decoder.Decode(obj); err != nil {
 		return err
 	}