Apache Sling Resource Merger Vulnerabilities