Because of the contentious status of the result-ranker, DL4J has not been upgraded in a long while. However, this leads to CVEs such as BUILD-608, and others will come in the future.

As DL4J is still used by machine-learning and image-recognition, we should keep the library up-to-date. For instance, the recent 1.0.0-M2 would fix BUILD-608.