When parsing untrusted XML files or configuration data in a Python application, why is the standard xml.etree.ElementTree library considered a security risk?

Name: CREST Olympiads
Address: Office No. 234, Spaze iTech Park, Tower-B2, 2nd Floor, Sohna - Gurgaon Rd, Sector 49, Gurgaon, 122018, IN
Telephone: +91-98182-94134

Answer as guest — Start Free Practice Test to earn Practice PointsHow to earn pointsAsk a question+3Answer a question+1Someone answers yours+1Your Q gets upvoted+1Pioneer bonus (first 5)+5, ask questions & climb the leaderboard!

A It lacks support for multi-language string encodings.
B It automatically executes embedded Python scripts via macros.
C It is inherently vulnerable to XML External Entity (XXE) and billion laughs denial-of-service attacks.
D It leaks memory by failing to garbage-collect parsed trees.