Novice here. Should I seek the patch from the web application framework I use (e.g. Jetty, Spring Boot)?