Like other Java enterprise tools, Tomcat has migrated from the original Java EE specification to Jakarta EE. Tomcat 9 and earlier were based on Java EE; Tomcat 10 and later are based on Jakarta EE.
A new zero-day vulnerability in the Spring Core Java framework called 'Spring4Shell' has been publicly disclosed, allowing unauthenticated remote code execution on applications. Spring is a very ...