Wicket includes jQuery 1, 2, and 3 but only 3 is used ^pkg:javascript/jquery@(1|2)\..*$ CVE-2015-9251 CVE-2019-11358 CVE-2020-11022 CVE-2020-11023 ^pkg:maven/com\.lowagie/itext@.*$ CVE-2021-43113