Fix SO vulnerabilities with cxf