spring-boot vireo still using tomcat 9.0.69 embedded, current version is 9.0.108 which fixes security vulnerabilities

[smutniak]

observable in tomcat-embed-core, tomcat-embed-el, and tomcat-embed-websocket in target/libs/ directory

[smutniak]

mvn dependency:tree

[INFO] org.tdl:vireo:war:4.3.1
[INFO] +- edu.tamu.weaver:auth:jar:2.2.0-SNAPSHOT:compile
[INFO] | +- edu.tamu.weaver:core:jar:2.2.0-SNAPSHOT:compile
[INFO] | | +- org.springframework:spring-web:jar:5.3.24:compile
[INFO] | | +- org.springframework:spring-beans:jar:5.3.24:compile
[INFO] | | - org.springframework.boot:spring-boot-starter-json:jar:2.6.14:compile
[INFO] | | +- com.fasterxml.jackson.core:jackson-databind:jar:2.13.4.2:compile
[INFO] | | | - com.fasterxml.jackson.core:jackson-annotations:jar:2.13.4:compile
[INFO] | | +- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:jar:2.13.4:compile
[INFO] | | +- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:jar:2.13.4:compile
[INFO] | | - com.fasterxml.jackson.module:jackson-module-parameter-names:jar:2.13.4:compile
[INFO] | +- edu.tamu.weaver:user:jar:2.2.0-SNAPSHOT:compile
[INFO] | +- edu.tamu.weaver:token:jar:2.2.0-SNAPSHOT:compile
[INFO] | | +- org.springframework.security:spring-security-jwt:jar:1.1.1.RELEASE:compile
[INFO] | | | - org.bouncycastle:bcpkix-jdk15on:jar:1.64:compile
[INFO] | | | - org.bouncycastle:bcprov-jdk15on:jar:1.64:compile
[INFO] | | +- io.jsonwebtoken:jjwt-api:jar:0.11.5:compile
[INFO] | | +- io.jsonwebtoken:jjwt-impl:jar:0.11.5:runtime
[INFO] | | - io.jsonwebtoken:jjwt-jackson:jar:0.11.5:runtime
[INFO] | +- org.springframework.boot:spring-boot-starter-web:jar:2.6.14:compile
[INFO] | | +- org.springframework.boot:spring-boot-starter-tomcat:jar:2.6.14:compile
[INFO] | | | +- org.apache.tomcat.embed:tomcat-embed-core:jar:9.0.69:compile
[INFO] | | | +- org.apache.tomcat.embed:tomcat-embed-el:jar:9.0.69:compile
[INFO] | | | - org.apache.tomcat.embed:tomcat-embed-websocket:jar:9.0.69:compile

tomcat-*:jar:9.0.69 pulled in by weaver