spring-web-without-remoting Spring Web 5.x with org.springframework.remoting package removed, to fix CVE-2016-1000027. For more info, see spring-projects/spring-framework #24434.