3341958 - After executing xs delete-app-instances --stopped --crashed security scan still finds vulnerability

After following KBA 3265493 - The fix to vulnerability Apache Commons Text Code Execution CVE-2022-42889 and executing command xs delete-app-instances --stopped --crashed, the security scan still finds vulnerability issue in some directories under /executionagent/executionroot/ folder AND the relevant droplet cannot be found in the list of command XSA du. 

XSA, vulnerability, droplet, patch, XSA du, executionroot, xs delete-app-instances --stopped --crashed , KBA , BC-XS-RT , XS Advanced Runtime / XS Controller , HAN-CPT-CPT2 , SAP HANA Cockpit version 2 - based on XSA , Problem