When will 1.3.0 release version be available or please port the fix to 1.2.6 Release version ? We need the fix for the 'xxe' vulnerability.