^pkg:maven/org\.springframework\.boot/.*@2\.7\..*$ CVE-2026-40974 ^pkg:maven/org\.springframework\.boot/spring-boot-starter-thymeleaf@.*$ CVE-2026-40477 CVE-2026-40478 ^pkg:maven/org\.springframework/spring-.*@5\.3\..*$ CVE-2026-41855 ^pkg:maven/org\.springframework/spring-web@5\.3\..*$ CVE-2016-1000027 ^pkg:maven/org\.springframework\.security/spring-security-.*@5\.7\..*$ CVE-2026-22732