[hibernate-issues] [JIRA] (HHH-13463) Hibernate has a dependency on plexus-utils:3.0.1 that is vulnerable to CVE-2017-1000487 with a CVSS of 7.5