<?xml version="1.0" encoding="UTF-8"?>
<!-- the vulnerability node is not needed -->
<vulnerabilities>
  <item name="mr-smith"/>
  <not-valid name='I should not appear in the results'/>
  <item name="neo"/>
</vulnerabilities>
