chore: address vulnerability reports (#195)

Author: pway99

suppressions.xml

@@ -0,0 +1,80 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
+    <suppress>
+        <notes><![CDATA[
+        file name: spring-aop-5.3.20.jar
+        sev: CRITICAL
+        CVE-2016-1000027
+        False positive. There is no usage of org.springframework.remoting.httpinvoker.*, the spring-aop dependency
+        is only used for the development and testing of spring migration recipes.
+     ]]></notes>
+        <gav>org.springframework:spring-aop:5.3.20</gav>
+        <cve>CVE-2016-1000027</cve>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: spring-beans-5.3.20.jar
+        sev: CRITICAL
+        CVE-2016-1000027
+        False positive. There is no usage of org.springframework.remoting.httpinvoker.*, the spring-beans dependency
+        is only used for the development and testing of spring migration recipes.
+     ]]></notes>
+        <gav>org.springframework:spring-beans:5.3.20</gav>
+        <cve>CVE-2016-1000027</cve>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: spring-context-5.3.20.jar
+        sev: CRITICAL
+        CVE-2016-1000027
+        False positive. There is no usage of org.springframework.remoting.httpinvoker.*, the spring-context dependency
+        is only used for the development and testing of spring migration recipes.
+     ]]></notes>
+        <gav>org.springframework:spring-context:5.3.20</gav>
+        <cve>CVE-2016-1000027</cve>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: spring-core-5.3.20.jar
+        sev: CRITICAL
+        CVE-2016-1000027
+        False positive. There is no usage of org.springframework.remoting.httpinvoker.*, the spring-core dependency
+        is only used for the development and testing of spring migration recipes.
+     ]]></notes>
+        <gav>org.springframework:spring-core:5.3.20</gav>
+        <cve>CVE-2016-1000027</cve>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: spring-expression-5.3.20.jar
+        sev: CRITICAL
+        CVE-2016-1000027
+        False positive. There is no usage of org.springframework.remoting.httpinvoker.*, the spring-expression dependency
+        is only used for the development and testing of spring migration recipes.
+     ]]></notes>
+        <gav>org.springframework:spring-expression:5.3.20</gav>
+        <cve>CVE-2016-1000027</cve>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: spring-jcl-5.3.20.jar
+        sev: CRITICAL
+        CVE-2016-1000027
+        False positive. There is no usage of org.springframework.remoting.httpinvoker.*, the spring-jcl dependency
+        is only used for the development and testing of spring migration recipes.
+     ]]></notes>
+        <gav>org.springframework:spring-jcl:5.3.20</gav>
+        <cve>CVE-2016-1000027</cve>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: spring-web-5.3.20.jar
+        sev: CRITICAL
+        CVE-2016-1000027
+        False positive. There is no usage of org.springframework.remoting.httpinvoker.*, the spring-web dependency
+        is only used for the development and testing of spring migration recipes.
+     ]]></notes>
+        <gav>org.springframework:spring-web:5.3.20</gav>
+        <cve>CVE-2016-1000027</cve>
+    </suppress>
+</suppressions>