Issue 17538: Document XML vulnerabilties