Nexus marks version with vulnerability patch as vulnerable

[mfrost (Maura Frost)]

Hi @valourie - thanks for reaching out. I reached out to our team about this. There was a patch released on version 4.8.5. However, upon further investigation, our security research team determined that there were some scenarios where users with “fixed” versions were still vulnerable, which is why Nexus still reports this. There is more information in Nexus Lifecycle that explains this further in an Advisory Deviation Notice associated with this issue.