Understanding The Known: OWASP A9 Using Components With Known Vulnerabilities