Tomasz Krug, you can check all dependencies (including transitive) by "mvn dependency:tree" command in directory that contains root pom.xml.
Try to check with "mvn dependency:tree | grep -i reflection" command if you use linux environment or just "mvn dependency:tree" in other case please.