Get details on the Legit research team’s discovery of a dependency confusion vulnerability in an archived Apache project.