Security: Bump multi_xml version to 0.5.2