fix: spring cves

Derek Zhangrequested to merge
cve-fix into master

Spring framework and spring boot versions update to address various CVEs

Merge request reports