If the users are not using Spring Framework, i think you can remove: Tools --> Libraries --> Spring Framework xxxxx. remove from Netbeans. and after, remove from directories.
If you want the Spring Version 5.3.20 https://repo.spring.io/ui/native/release/org/springframework/spring/5.3.20/ spring-5.3.20-dist.zip You or the users must to know what they want, we don't know what features your company will use. Em qui., 25 de ago. de 2022 às 14:41, German Salazar <[email protected]> escreveu: > Sorry for my ignorance, I am not a user of netbeans, nor a java developer; > I am just centrally installing a couple of IDEs to cater to a small user > group.. > > I have installed NetBeans 14 and now IT Security is complaining about some > vulnerabilities; in particular: > > ./java/modules/ext/spring-3.0/spring-core-3.2.18.RELEASE.jar > ./java/modules/ext/spring-4/spring-core-4.3.29.RELEASE.jar > ./java/modules/ext/spring-5/spring-core-5.2.9.RELEASE.jar > > > What are the contents of these spring-* subdirectories for? Do I need all > 3 of them? > What feature/extension would I be taking away if I remove them? > IT Security indicates that the patched version is > > spring-core-5.2.20.RELEASE.jar > > Where can I possibly find that? > > Thanks, > -- Moacir R.F Desenvolvedor de Softwares http://www.moacirrf.com.br
