4.0.0 scabench jsonorg-tp1 1.0-SNAPSHOT project with json.org vulnerability (CVE-2022-45688) 11 11 org.json json 20220924 org.junit.jupiter junit-jupiter-api 5.9.2 test org.apache.maven.plugins maven-surefire-plugin 3.0.0 org.cyclonedx cyclonedx-maven-plugin 2.7.10 package makeAggregateBom library 1.4 true true true true true false false true all CycloneDX-Sbom