Safari app upgrade issue

Hi Everyone,

Recently I'm struggling with a weird issue on our Kandji managed Macbooks.

I'm getting reports by our Qualys console on some devices that has a vulnerable version (16.2) of Safari app installed.

While I'm crosschecking I see that in fact there are 2 different versions installed to these devices. They have both 16.2 and 17.0 (17.1) installed. Safari update is not managed by Kandji, it is still controlled by native Apple Software Update.

Attached screenshot shows the 2 different version under 2 different paths.

In the same time our users confirm that they have 2x Safari app in /Applications:

I need to find a way to get rid of 16.2 and in general I just would like to understand what is really going on with these devices.

Have anyone seen such issues recently?

Thanks!