Note that xml.etree.ElementTree is very dangerous to use when parsing untrusted XML data, due to various possible attacks. Please replace xml.etree with the defusedxml equivalent function.
Fixed in https://pagure.io/odcs/pull-request/64.
Metadata Update from @jkaluza: - Issue status updated to: Closed (was: Open)
This issue has been migrated to Fedora Forge: https://forge.fedoraproject.org/pungi/odcs/issues/62
Please continue any further discussion there.