Spring by VMware Spring Security

• CVE-2020-5408 Unrated Dictionary attack with Spring Security queryable text encryptor 1.6%
• CVE-2020-5407 Unrated Signature Wrapping Vulnerability with spring-security-saml2-service-provider 1.2%