malcom box Lxr Cross Referencer Vulnerabilities