fix: spring cve related upgrades

Derek Zhangrequested to merge
cve-fix into master

version bumps addressing various spring related cves

Merge request reports