Update bundle to fix CVE.