[java-sig-commits] [Bug 1709860] CVE-2019-5427 c3p0: loading XML configuration leads to denial of service