Known Vulnerabilities in apache-commons-compress