Policy-models uses io.grpc version 1.17.1.  That version has a security vulnerability, sonatype-2020-0641, and should be upgraded to 1.31.1 or later.

Don't know if any of the other repos (apex-pdp?) include this dependency, too, or if they just get it indirectly.