CVE-2021-41559: Quadratic blowup in Convert::xml2array() – CVSS 6.5 · Watchpost