Known Vulnerabilities in maven-assembly-plugin