vuln fixes

3 jobs for !264 with vuln-fix-lucene in 59 minutes and 5 seconds (queued for 1 second)
latest merge request