resolve spring and netty CVE

Timothy Loblrequested to merge
lobtimo-cve-fix into master

resolve spring CVE in all CSP and netty common cve in aws

Merge request reports