I need a package listed in the dependency graph, that has a vulnerability, to show up in multiple paths https://github.com/spring-projects/spring-framework 5.3.21 Maven · [pom.xml](https://github.com/devopselvis/coding-agent-example-java-codeql-autobuild/blob/main/pom.xml) · Detected automatically on Sep 29, 2025 · Apache-2.0 AND BSD-3-Clause AND NOASSERTION How do I modify the code to make that happen.