4.0.0 org.springframework.boot spring-boot-starter-parent 3.4.3 com.example cve-2026-22732-demo 0.0.1-SNAPSHOT CVE-2026-22732 Demo Minimal reproduction of CVE-2026-22732 - Spring Security HTTP headers silently dropped 17 6.4.12 org.springframework.boot spring-boot-starter-web org.springframework.boot spring-boot-starter-security org.springframework.boot spring-boot-starter-test test org.springframework.security spring-security-test test org.springframework.boot spring-boot-maven-plugin