Make tests more resilient

Since any arbitrary version we pick could have a vulnerability discovered down the road, and we're using the current DB rather than a fixed snapshot for testing, let's automatically pick a known-not-vulnerable version for such tests.