Codenomicon said it found the issues early this year while developing a product for XML testing, and has already been working with Finland's CERT-FI on remediation.