udpate picofeed to fix xxe