https://www.whitesourcesoftware.com/vulnerability-database/WS-2018-0590 Update to v3.5.0 should solve it.