Rejected reason: Further research determined the issue is not an independent vulnerability as it originates from Apache Felix.
