The vulnerability description explicitly identifies parseXML as the vulnerable function across all sources (CVE, GHSA, PyPA advisory). XXE vulnerabilities typically occur when XML parsers resolve external entities by default. The function's name and role in processing XML input align directly with the described attack vector. While the exact file path isn't explicitly documented, the package's naming convention suggests it would reside in easy_xml.py.