I’m new to Togglz and there is not much documentation on this problem, nor have I found a solution from searching the web and Stack overflow. (I found one person asking the same question but he wasn’t given a solution). I’m trying to write a POC using Togglz.

I am trying to adopt feature toggle with Togglz for my Spring Boot 3.2.5 application. Unfortunately after I do the setup, at start-up, it says that I need a UserProvider.
Is this correct? Why would it need one if I specify the console to not be protected.
Also, how to remove the vulnerability CVE-2023-2976?