From this thread, it sounds like the second vulnerability doesn't affect spigot or vanilla minecraft: https://www.spigotmc.org/threads/spigot-security-releases

From this thread, it sounds like the second vulnerability doesn't affect spigot or vanilla minecraft: https://www.spigotmc.org/threads/spigot-security-releases-%E2%80%94-1-8-8%E2%80%931-18.537204/ https://www.spigotmc.org/threads/spigot-security-releases-%E... Also, mojang's update instructions: https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition https://www.minecraft.net/en-us/article/important-message--s...