fix: tomcat-core crypto json-smart netty-common CVE

Derek Zhangrequested to merge
cve-fix into master

All Submissions:

  • [YES/NO] I have added an explanation of what changes in this merge do and why we should include it?
  • [YES/NO] I have updated the documentation accordingly.
  • [YES/NO/NA] I have added tests to cover my changes.
  • [YES/NO/NA] All new and existing tests passed.
  • [YES/NO/NA] My code follows the code style of this project.
  • [YES/NO/NA] I ran lint checks locally prior to submission.

What is the current behavior?

Issue: Remember to link the workitem to this pull request.

What is the new behavior?

Does this introduce a breaking change?

  • [/NO]

Any relevant logs, error output, etc?

(If it’s long, please paste to https://ghostbin.com/ and insert the link here.)

Other information

CVE-2025-24813 CVE-2025-22228 CVE-2024-57699 CVE-2025-25193

Merge request reports