M16 update vulnerable packages

Merge request reports