Like other Java enterprise tools, Tomcat has migrated from the original Java EE specification to Jakarta EE. Tomcat 9 and earlier were based on Java EE; Tomcat 10 and later are based on Jakarta EE.
Incidents are common, and the remediation window is the risk: 23% reported a container security incident, and delays between disclosure and patching can leave known exposures in production. Java ...