This release upgrades to Spring Framework 5.2. Please refer to Spring Framework’s upgrade documentation for further details. As of #16090, JMX is not enabled by ...

XML eXternal Entity injection (XXE), which is now part of the OWASP Top 10 via the point A4, is a type of attack against an application that parses XML input. XXE issue is referenced under the ID 611 ...