Fix SO vulnerabilities with cxf

No match.