fix: tomcat cve

Derek Zhangrequested to merge
cve-fix into master

org.apache.tomcat.embed:tomcat-embed-core (app.jar) │ CVE-2025-48988

Merge request reports