Avoid directory traversal when reading package xml files, also check if file exists before try to read it