[philh]

My understanding is it's not a single flaw. Virtually every XML library available is flawed, but each in their own way.