Fix bug incorrectly attributing SpotBugs vulnerability to FindSecBugs