Vulnerabilities in REXML 3.1.9