[ https://issues.jboss.org/browse/DROOLS-4302?page=com.atlassian.jira.plugi... ] Michael Biarnes Kiefer commented on DROOLS-4302: ------------------------------------------------ [~danielezonca] also: github security vulnaerabilioty messages: Remediation Upgrade org.springframework:spring-core to version 4.3.18 or later. For example: <dependency> <groupId>org.springframework</groupId> <artifactId>spring-core</artifactId> <version>[4.3.18,)</version> </dependency> So lets upgrade springframework to 5.1.3.RELEASE -- This message was sent by Atlassian Jira (v7.12.1#712002)