Known Vulnerabilities in maven-surefire-plugin