CVE-2021-28965: XML round-trip vulnerability in REXML | Hacker News Reader