Researchers have released a proof-of-concept showing how a XXE vulnerability can be exploited to attack Ghidra project users.
Source: Threadpost