ReDoS (Regular Expression Denial Of Service)

scrapy is vulnerable to ReDoS (Regular Expression Denial Of Service). The vulnerability is due to a Regular Expression with inefficient complexity which is used to parse XML content when utilizing the XMLFeedSpider class when scraping XML. If the class is utilized to scrape an attacker-controlled web page, a denial-of-service situation can occur, resulting in the system hanging with significant resource consumption.