Description:
Due to the CVE cve-2022-31690 (https://tanzu.vmware.com/security/cve-2022-31690) we just wanted to upgrade to SCDF 2.10.0.

I just saw that the dependencies spring-cloud-services-starter-config-client and spring-cloud-dataflow-rest-client provide spring-security-oauth2-client in version 5.7.3 but Spring Boot 2.7.6 provides spring-security-oauth2-client 5.7.5

Release versions:
2.10.0

Custom apps:

Steps to reproduce:
Just checkout the project and see the dependency graph.

Screenshots:

Additional context:
As a workaround we excluded spring-security-oauth2-client from those dependency and added it in the right version.