sox-devel vulnerabilities