fix: tomcat and security cve

Type of change

• Bug Fix
• Feature

Please provide link to gitlab issue or ADR(Architecture Decision Record)

Does this introduce a change in the core logic?

• [YES/NO]

Does this introduce a change in the cloud provider implementation, if so which cloud?

• AWS
• Azure
• GCP
• IBM

Does this introduce a breaking change?

• [YES/NO]

What is the current behavior?

What is the new/expected behavior?

Have you added/updated Unit Tests and Integration Tests?

Any other useful information

https://community.opengroup.org/osdu/platform/consumption/geospatial/-/security/vulnerabilities/42106 https://community.opengroup.org/osdu/platform/consumption/geospatial/-/security/vulnerabilities/42032

changed milestone to %M25 - Release 0.28

added MRDependencies Upgrade Vulnerability Management labels

requested review from @derekxz

assigned to @derekxz

added 1 commit

• 8b0476b2 - Updating NOTICE

Compare with previous version

approved this merge request

approved this merge request

merged

mentioned in commit 0bb7a0c9

mentioned in merge request !362 (merged)