Vulnerabilities in REXML 3.1.8