Known Vulnerabilities in apache-commons-configuration