libxstream-java vulnerabilities