I.e. if the STIX version is 1.0.1, CybOX version attributes should be 2.0.1. Component version attributes should be the correct ones for that version. Lower versions can give a warning (since it's valid), unnecessary versions can give an info (since it's unnecessary).