Apache Tiles moved into the Attic in December 2018 and our cyber team identified few vulnerabilities in the latest available tiles library. Which made us to look for alternatives. I am using Spring MVC 5.X framework and JSP.