Advisories for Maven/Org.springframework/Spring-Beans package

In spring framework versions prior to 5.3.20+, 5.2.22+ and old unsupported versions, applications that handle file uploads is vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in org.springframework:spring-beans.