A whole bunch of stuff says 3.2.8, which seems old.

tomcat-8.5.34/LICENSE.txt: (The Apache Software License, Version 2.0) Spring AOP (org.springframework:spring-aop:3.2.8.RELEASE - https://github.com/SpringSource/spring-framework)
tomcat-8.5.34/LICENSE.txt: (The Apache Software License, Version 2.0) Spring Beans (org.springframework:spring-beans:3.2.8.RELEASE - https://github.com/SpringSource/spring-framework)
tomcat-8.5.34/LICENSE.txt: (The Apache Software License, Version 2.0) Spring Context (org.springframework:spring-context:3.2.8.RELEASE - https://github.com/SpringSource/spring-framework)
tomcat-8.5.34/LICENSE.txt: (The Apache Software License, Version 2.0) Spring Core (org.springframework:spring-core:3.2.8.RELEASE - https://github.com/SpringSource/spring-framework)
tomcat-8.5.34/LICENSE.txt: (The Apache Software License, Version 2.0) Spring Expression Language (SpEL) (org.springframework:spring-expression:3.2.8.RELEASE - https://github.com/SpringSource/spring-framework)
tomcat-8.5.34/LICENSE.txt: (The Apache Software License, Version 2.0) Spring JDBC (org.springframework:spring-jdbc:3.2.8.RELEASE - https://github.com/SpringSource/spring-framework)
tomcat-8.5.34/LICENSE.txt: (The Apache Software License, Version 2.0) Spring JMS (org.springframework:spring-jms:3.2.8.RELEASE - https://github.com/SpringSource/spring-framework)
tomcat-8.5.34/LICENSE.txt: (The Apache Software License, Version 2.0) Spring Object/Relational Mapping (org.springframework:spring-orm:3.2.8.RELEASE - https://github.com/SpringSource/spring-framework)