Vulnerabilities in barbican 13.0.0