Known Vulnerabilities in maven-artifact-transfer