[java-sig-commits] [Bug 1572463] CVE-2017-15691 uima: XML external entity expansion (XXE) can allow attackers to execute arbitrary code