Known Vulnerabilities in maven-source-plugin