Critical vulnerabilities:

• jackson-databind : 2.8.11.1 -  in Casablanca it was marked as false positive
• spring-web : 5.0.9.RELEASE (we had exchanges on it in Casablanca – it was marked as false positive)
• spring-security-oauth2 : 1.0.0.M6b (we had exchanges on it in Casablanca – it was marked as false positive)
• jar-with-dependencies : 0.2.12
• ajsc-runner : 3.0.10-oss (we had exchanges on it in Casablanca – it was marked as false positive)
• ajsc-war : war : 3.0.10-oss (we had exchanges on it in Casablanca – it was marked as false positive)

Severe vulnerabilities:

• zookeeper : 3.4.10
• commons-fileupload : 1.3.3 (we had exchanges on it in Casablanca – it was marked as false positive)
• mail : 1.4.4 – in Casablanca it was marked as false positive
• camel-mail : 2.21.1 (we had exchanges on it in Casablanca – it was marked as false positive)