Known Vulnerabilities in xmlpull-api