Known Vulnerabilities in sbt-bootstrap