maven output RequireUpperBounds

[WARNING] Rule 6: org.apache.maven.plugins.enforcer.RequireUpperBoundDeps failed with message:
Failed while enforcing RequireUpperBoundDeps. The error(s) are [
Require upper bound dependencies error for org.apache.commons:commons-lang3:3.4 paths to dependency are:
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.apache.commons:commons-lang3:3.4
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.apache.maven:maven-model-builder:3.5.2
      +-org.apache.commons:commons-lang3:3.5
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-test-harness:2.34
    +-org.jenkins-ci.main:jenkins-test-harness-htmlunit:2.18-1
      +-org.apache.commons:commons-lang3:3.4
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.apache.maven:maven-model-builder:3.5.2
      +-org.apache.maven:maven-model:3.5.2
        +-org.apache.commons:commons-lang3:3.5
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.apache.maven:maven-model-builder:3.5.2
      +-org.apache.maven:maven-artifact:3.5.2
        +-org.apache.commons:commons-lang3:3.5
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.apache.maven:maven-model-builder:3.5.2
      +-org.apache.maven:maven-builder-support:3.5.2
        +-org.apache.commons:commons-lang3:3.5
, 
Require upper bound dependencies error for commons-io:commons-io:2.4 paths to dependency are:
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-commons-io:commons-io:2.4
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:wss-agent-report:2.4.6
    +-commons-io:commons-io:2.4
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-commons-io:commons-io:2.4
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-fr.dutra.tools.maven.deptree:maven-dependency-tree-parser:1.0.3-WSS
      +-commons-io:commons-io:2.0.1
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.codehaus.plexus:plexus-archiver:3.4
      +-commons-io:commons-io:2.5
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:wss-agent-api-client:2.4.6
    +-org.whitesource:wss-agent-hash-calculator:2.4.6
      +-commons-io:commons-io:2.4
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.apache.maven.wagon:wagon-webdav-jackrabbit:2.4
      +-commons-io:commons-io:2.2
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.jenkins-ci.main:cli:2.114
      +-commons-io:commons-io:2.4
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.jenkins-ci:crypto-util:1.1
      +-commons-io:commons-io:1.4
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.jenkins-ci:bytecode-compatibility-transformer:1.8
      +-commons-io:commons-io:2.4
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-commons-fileupload:commons-fileupload:1.3.1-jenkins-2
      +-commons-io:commons-io:2.2
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-test-harness:2.34
    +-org.jenkins-ci.main:jenkins-test-harness-htmlunit:2.18-1
      +-commons-io:commons-io:2.4
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.codehaus.plexus:plexus-archiver:3.4
      +-org.codehaus.plexus:plexus-io:2.7.1
        +-commons-io:commons-io:2.2
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.apache.maven.wagon:wagon-http:2.4
      +-org.apache.maven.wagon:wagon-http-shared4:2.4
        +-commons-io:commons-io:2.0.1
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.apache.maven.wagon:wagon-webdav-jackrabbit:2.4
      +-org.apache.maven.wagon:wagon-http-shared:2.4
        +-commons-io:commons-io:2.2
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.kohsuke.stapler:stapler-jrebel:1.254
      +-org.kohsuke.stapler:stapler:1.254
        +-commons-io:commons-io:2.4
, 
Require upper bound dependencies error for org.whitesource:wss-agent-api-client:2.4.6 paths to dependency are:
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:wss-agent-api-client:2.4.6
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.whitesource:wss-agent-api-client:2.5.0
, 
Require upper bound dependencies error for org.whitesource:wss-agent-report:2.4.6 paths to dependency are:
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:wss-agent-report:2.4.6
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.whitesource:wss-agent-report:2.5.0
, 
Require upper bound dependencies error for org.apache.commons:commons-compress:1.8.1 paths to dependency are:
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.apache.commons:commons-compress:1.8.1
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.apache.commons:commons-compress:1.10
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.codehaus.plexus:plexus-archiver:3.4
      +-org.apache.commons:commons-compress:1.11
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.redline-rpm:redline:1.2.1
      +-org.apache.commons:commons-compress:1.6
, 
Require upper bound dependencies error for org.springframework:spring-aop:2.5.6.SEC03 paths to dependency are:
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.springframework:spring-aop:2.5.6.SEC03
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.springframework:spring-web:4.3.1.RELEASE
      +-org.springframework:spring-aop:2.5.6.SEC03
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.springframework:spring-web:4.3.1.RELEASE
      +-org.springframework:spring-context:4.3.1.RELEASE
        +-org.springframework:spring-aop:4.3.1.RELEASE
, 
Require upper bound dependencies error for org.springframework:spring-core:2.5.6.SEC03 paths to dependency are:
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.springframework:spring-core:2.5.6.SEC03
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.springframework:spring-web:4.3.1.RELEASE
      +-org.springframework:spring-core:2.5.6.SEC03
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.acegisecurity:acegi-security:1.0.7
      +-org.springframework:spring-core:1.2.9
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.springframework:spring-webmvc:2.5.6.SEC03
      +-org.springframework:spring-core:2.5.6.SEC03
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.springframework:spring-web:4.3.1.RELEASE
      +-org.springframework:spring-aop:2.5.6.SEC03
        +-org.springframework:spring-core:4.3.1.RELEASE
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.springframework:spring-web:4.3.1.RELEASE
      +-org.springframework:spring-beans:4.3.1.RELEASE
        +-org.springframework:spring-core:4.3.1.RELEASE
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.springframework:spring-web:4.3.1.RELEASE
      +-org.springframework:spring-context:4.3.1.RELEASE
        +-org.springframework:spring-core:4.3.1.RELEASE
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.acegisecurity:acegi-security:1.0.7
      +-org.springframework:spring-jdbc:1.2.9
        +-org.springframework:spring-core:1.2.9
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.springframework:spring-webmvc:2.5.6.SEC03
      +-org.springframework:spring-context-support:2.5.6.SEC03
        +-org.springframework:spring-core:2.5.6.SEC03
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:whitesource-fs-agent:17.12.1
    +-org.springframework:spring-web:4.3.1.RELEASE
      +-org.springframework:spring-context:4.3.1.RELEASE
        +-org.springframework:spring-expression:4.3.1.RELEASE
          +-org.springframework:spring-core:4.3.1.RELEASE
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.acegisecurity:acegi-security:1.0.7
      +-org.springframework:spring-jdbc:1.2.9
        +-org.springframework:spring-dao:1.2.9
          +-org.springframework:spring-core:1.2.9
, 
Require upper bound dependencies error for commons-codec:commons-codec:1.9 paths to dependency are:
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-commons-codec:commons-codec:1.9
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:wss-agent-api-client:2.4.6
    +-org.whitesource:wss-agent-hash-calculator:2.4.6
      +-commons-codec:commons-codec:1.9
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:wss-agent-api-client:2.4.6
    +-org.whitesource:wss-agent-utils:2.4.6
      +-commons-codec:commons-codec:1.10
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.whitesource:wss-agent-api-client:2.4.6
    +-org.apache.httpcomponents:httpclient:4.3.6
      +-commons-codec:commons-codec:1.6
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.jenkins-ci.main:cli:2.114
      +-commons-codec:commons-codec:1.9
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.acegisecurity:acegi-security:1.0.7
      +-commons-codec:commons-codec:1.3
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven-agent:1.6
      +-commons-httpclient:commons-httpclient:3.1-jenkins-1
        +-commons-codec:commons-codec:1.2
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-org.kohsuke.stapler:stapler-jrebel:1.254
      +-org.kohsuke.stapler:stapler:1.254
        +-commons-codec:commons-codec:1.9
, 
Require upper bound dependencies error for org.apache.maven:maven-embedder:3.1.0 paths to dependency are:
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.apache.maven:maven-embedder:3.1.0
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven3-agent:1.6
      +-org.apache.maven:maven-embedder:3.0.5
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven31-agent:1.6
      +-org.apache.maven:maven-embedder:3.1.0
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven32-agent:1.6
      +-org.apache.maven:maven-embedder:3.2.3
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven3-interceptor:1.6
      +-org.apache.maven:maven-embedder:3.0.5
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven31-interceptor:1.6
      +-org.apache.maven:maven-embedder:3.1.0
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven32-interceptor:1.6
      +-org.apache.maven:maven-embedder:3.2.3
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven3-interceptor-commons:1.6
      +-org.apache.maven:maven-embedder:3.0.5
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.lib:lib-jenkins-maven-embedder:3.11
      +-org.apache.maven:maven-embedder:3.1.0
, 
Require upper bound dependencies error for org.apache.maven:maven-core:3.1.0 paths to dependency are:
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.apache.maven:maven-core:3.1.0
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven3-interceptor:1.6
      +-org.apache.maven:maven-core:3.0.5
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven31-interceptor:1.6
      +-org.apache.maven:maven-core:3.1.0
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven32-interceptor:1.6
      +-org.apache.maven:maven-core:3.2.3
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven3-interceptor-commons:1.6
      +-org.apache.maven:maven-core:3.0.5
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.apache.maven:maven-compat:3.1.0
      +-org.apache.maven:maven-core:3.1.0
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.apache.maven:maven-embedder:3.1.0
      +-org.apache.maven:maven-core:3.1.0
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.lib:lib-jenkins-maven-embedder:3.11
      +-org.apache.maven:maven-core:3.1.0
, 
Require upper bound dependencies error for org.apache.maven:maven-aether-provider:3.1.0 paths to dependency are:
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.apache.maven:maven-aether-provider:3.1.0
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven3-interceptor:1.6
      +-org.apache.maven:maven-aether-provider:3.0.5
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven31-interceptor:1.6
      +-org.apache.maven:maven-aether-provider:3.1.0
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven32-interceptor:1.6
      +-org.apache.maven:maven-aether-provider:3.2.3
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.main.maven:maven3-interceptor-commons:1.6
      +-org.apache.maven:maven-aether-provider:3.0.5
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.apache.maven:maven-core:3.1.0
      +-org.apache.maven:maven-aether-provider:3.1.0
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-org.jenkins-ci.lib:lib-jenkins-maven-embedder:3.11
      +-org.apache.maven:maven-aether-provider:3.1.0
, 
Require upper bound dependencies error for com.google.inject:guice:4.0-beta paths to dependency are:
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:maven-plugin:2.8
    +-com.google.inject:guice:4.0-beta
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-com.google.inject:guice:4.0
, 
Require upper bound dependencies error for com.infradna.tool:bridge-method-annotation:1.4 paths to dependency are:
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkinsci.plugins:git:1.1.14
    +-com.infradna.tool:bridge-method-annotation:1.4
and
+-org.jenkins-ci.plugins:whitesource:18.3.2-SNAPSHOT
  +-org.jenkins-ci.main:jenkins-core:2.114
    +-com.infradna.tool:bridge-method-annotation:1.13
]

Did you ever solve this?

seems guidance can be found here : https://wiki.jenkins.io/display/JENKINS//How+to+fix+RequireUpperBoundDeps
so for this example it seems like in the beginning apache commons lang is one of the causes : org.apache.commons:commons-lang .
You have to find the highest version and either change or add that in the pom.xml file.

Look it up :
https://mvnrepository.com/artifact/org.apache.commons/commons-lang3/3.5
and use the snippet:

org.apache.commons commons-lang3 3.5

and you should be good. do it for the others in the same way and it should work.
Worst case you may have a breaking change and you need to update other libraries to newer version, but with these minor differences it should be fine.