* update pom build, new url certs, update java_cve.json file, more TODOs