Analyze and resolve CVE CVE-2019-11272 on org.springframework.security:spring-security-core:4.2.6.RELEASE

[ghost]

This finding popped out recently in our scans. We're not using the impacted component as far as I can tell, so the issue will likely be waived.