pivotal Spring Security Vulnerabilities