fix(security): address fast-xml-parser vulnerability#302