Apache Sling Auth Core Component Vulnerabilities