spring-boot-starter-security移除内置的spring-security-core，单独引用依赖版本，出现两个版本的依赖包，没有覆盖掉？

Question

<dependency>

<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-security</artifactId>
<exclusions>
    <exclusion>
        <groupId>org.springframework.security</groupId>
        <artifactId>spring-security-web</artifactId>
    </exclusion>
    <exclusion>
        <artifactId>spring-security-config</artifactId>
        <groupId>org.springframework.security</groupId>
    </exclusion>
    <exclusion>
        <artifactId>spring-security-core</artifactId>
        <groupId>org.springframework.security</groupId>
    </exclusion>
</exclusions>

</dependency>

<dependency>

<groupId>org.springframework.security</groupId>
<artifactId>spring-security-web</artifactId>
<version>5.4.11</version>

</dependency>
<dependency>

<groupId>org.springframework.security</groupId>
<artifactId>spring-security-core</artifactId>
<version>5.4.11</version>

</dependency>
<dependency>

<groupId>org.springframework.security</groupId>
<artifactId>spring-security-config</artifactId>
<version>5.4.11</version>

</dependency>