spring Spring Data Jpa Vulnerabilities