title: DependencyManagement with transitive multi-module dependencies
body: <p>I have a parent module A with a child B. 
  B has a dependency on a lib C and transitively on D.version1 (so I can't change the version directly).</p>
  
  <p>Because D.version1 has a CVE vulnerability, I want to change D to version2, which is retrocompatible with previous versions.</p>
  
  <p><a href="https://i.stack.imgur.com/81Z6r.png" rel="nofollow noreferrer">First diagram</a></p>
  
  <p>Now, B is a dependency of a module E</p>
  
  <p><a href="https://i.stack.imgur.com/x3ymj.png" rel="nofollow noreferrer">Second diagram</a></p>
  
  <ul>
  <li><p>Why the version of D in module E has rollbacked to version1?</p>
  
  <ul>
  <li>If this is the real behavior, how could I override the D version <strong>from</strong> A/B ? </li>
  </ul></li>
  </ul>