Vulnerabilities in Sonatype Inc. software