Backport: Prevent XXE injection during CycloneDX validation and parsing

[nscuro]

Description

Disables XXE support in the XmlInputFactory used for determining the schema version prior to validation.

Addressed Issue

Backports #3870

Additional Details

N/A

Checklist

• [x] I have read and understand the contributing guidelines
• [x] This PR fixes a defect, and I have provided tests to verify that the fix is effective
• ~This PR implements an enhancement, and I have provided tests to verify that it works as intended~
• ~This PR introduces changes to the database model, and I have added corresponding update logic~
• ~This PR introduces new or alters existing behavior, and I have updated the documentation accordingly~

[codacy-production[bot]]

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation	Diff coverage
:white_check_mark: +0.01% (target: -1.00%)	:white_check_mark: 100.00% (target: 70.00%)

Coverage variation details

| | Coverable lines | Covered lines | Coverage | | ------------- | ------------- | ------------- | ------------- | | Common ancestor commit (f7d3b94faf8e9e199d8461781bdfb8469d7229ce) | 22062 | 16814 | 76.21% | | | Head commit (e9b8ec0ec0af2664280600a8ec978d8902115a88) | 22069 (+7) | 16821 (+7) | 76.22% (**+0.01%**) | **Coverage variation** is the difference between the coverage for the head and common ancestor commits of the pull request branch: ` - `

Diff coverage details

| | Coverable lines | Covered lines | Diff coverage | | ------------- | ------------- | ------------- | ------------- | | Pull request (#3871) | 9 | 9 | **100.00%** | **Diff coverage** is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: `/ * 100%`

See your quality gate settings    Change summary preferences

---

_{:rocket: Don’t miss a bit, follow what’s new on Codacy.}

_{Codacy stopped sending the deprecated coverage status on June 5th, 2024. Learn more}