Solve dependabot issue of numeric entity expansion bypassing with fast-xml-parser version upgrade