Switched from vulnerable xml.etree to defusedxml, which is more safe. More details in defusedxml page on PyPi.