Vulnerability: Castor Library default configuration could lead to XML External Entity (XXE) Attack