According to the below CVE entry spring-beans-2.5.5.jar has a security vulnerability which I couldn't get DependencyCheck to report. It might be because of CVE updates don't include it. I'm not sure, is it an expected result?

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1622