https://bugzilla.redhat.com/show_bug.cgi?id=1643043
--- Comment #3 from Doran Moppert <dmoppert(a)redhat.com> ---
Statement:
The package rhvm-dependencies does not include the vulnerable spring-webmvc
component.
--
You are receiving this mail because:
You are on the CC list for the bug.