2017/4/17:

https://nexus-iq.wl.linuxfoundation.org/assets/index.html#/reports/onap-vnfsdk-refrepo/0ca70c3c11dd4a44bff246d5fe87dee1

org.postgresql : postgresql : 42.2.5, 

the related CVE is marked as disputed (see https://nvd.nist.gov/vuln/detail/CVE-2019-9193 for further details). and it's commonly used and without a newer version. we'd like to ask exception for it. 

Jackson:  we are working on using the Gson as the Alternative of jackson

bootstrap: they publish the latest version 4.3.1 is non-vulnerable version. we will investigate this in next release.

https://nexus-iq.wl.linuxfoundation.org/assets/index.html#/reports/onap-vnfsdk-refrepo/e40a62a7790d4311adf079d729ac1f1e