remove versions vulnerable to TROVE-2017-001 from "recommended versions"