Known Vulnerabilities in maven-filtering