Marked librsvg as vulnerable.