結果 : using components with known vulnerabilities cwe