hdf5 vulnerabilities