Update references for java_jre17_reflection_types

CVE confirmed by Oracle via Jeroen Frijters: https://twitter.com/JeroenFrijters/status/326383301151576064