Known Vulnerabilities in Spring Security OAuth