Fix commons-io vulnerability