maven · org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections

• CVE-2015-6420
• CVE-2015-7501