Known Vulnerabilities in tycho-bootstrap