Vulnerabilities in Spring software