Wicket includes jQuery 1, 2, and 3 but only 3 is used ^pkg:javascript/jquery@(1|2)\..*$ CVE-2015-9251 CVE-2019-11358 CVE-2020-11022 CVE-2020-11023