Update Spring Security for CVE-2022-22978 and CVE-2022-31692
https://spring.io/blog/2022/05/15/spring-security-5-7-0-5-6-4-5-5-7-released-fixes-cve-2022-22978-cve-2022-22976

https://spring.io/security/cve-2022-31692

At the time of writing, no actual vulnerability is known for Bamboo, however customers have reported their scanning tools report the pre-fixed versions of Spring Security so at a minimum it should be updated to alleviate that concern.