Known Vulnerabilities in maven-dependency-tree