CVE-2022-22965脆弱的VMware Spring Bean 5.2.0即使在使用5.2.22版更新POM之后

Question

我正在使用Java 11，目前在POM.xml中使用的是我的弹簧框架版本为5.2.22

存在于此

<dependency>
            <groupId>com.okta.spring</groupId>
            <artifactId>okta-spring-security-parent</artifactId>
            <version>0.1.0</version>
            <type>pom</type>
        </dependency>
        
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-core</artifactId>
            <version>5.7.2</version>
        </dependency>

        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-web</artifactId>
            <version>5.1.6.RELEASE</version>
        </dependency>

        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-config</artifactId>
            <version>5.1.6.RELEASE</version>
        </dependency>

        <dependency>
            <groupId>org.springframework.security.oauth</groupId>
            <artifactId>spring-security-oauth2</artifactId>
            <version>2.5.2.RELEASE</version>
        </dependency>

        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-oauth2-client</artifactId>
            <version>5.1.6.RELEASE</version>
        </dependency>

        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-oauth2-jose</artifactId>
            <version>5.1.6.RELEASE</version>
        </dependency>

        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-taglibs</artifactId>
            <version>5.0.0.RELEASE</version>
        </dependency>

        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-orm</artifactId>
            <version>4.3.2.RELEASE</version>
    </dependency>

这些依赖性也

CVE-2022-22965 Vulnerable software installed: VMware Spring Beans 5.2.0

。我什至尝试创建Maven依赖树，但由于报告了该问题的依赖性，因此无法弄清楚。 请建议我如何减轻此漏洞