Note that the vulnerability applies to the Java library (or systems that use it, like Spark),as mentioned in the original source.