Merge pull request #543 from apache/feat/cve-CVE-2020-1955

feat: new cve, woop