More potential deserialization gadgets reported for:

• DBCP types (similar to c3p0 ones already included)
• Spring framework AOP helpers
• Spring framework application context

For some of these need to check parent hierarchy.

Fixed in:

• 2.9.4
• 2.8.11
• 2.7.9.2
• 2.6.7.3
• Not applicable to 2.10.0 or later