Fix spring security vulnerability