Each project will update the vulnerable direct dependencies in their code base following the recommendations of SECCOM documented in individual project pages under Paris Package Updates - Security Vulnerabilities - Confluence in the protected Security Vulnerabilities space.

Each project should reference their page for the policy description and correlation with ONAP release milestones.

Submit a LF Ticket for access to the Security Vulnerabilities space.