Fixes two CVEs: CVE-2021-28965: XML round-trip vulnerability in REXML CVE-2021-28966: Path traversal in Tempfile on Windows Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>