Comment From: bclozel

See CVE-2022-42252 and Tomcat security notice.