For CVE-2018-1259/1260, Foglight Core Server nor SQL Server Cartridge do not include related jars(spring-data-commons/spring-data-rest/spring-security-oauth2)
Here's a list of spring modules Foglight Server included:
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center