Apache has published security advisories, highlighting vulnerabilities in Apache Tomcat on 14th January, 2021. It is recommended that you take the necessary precautions by ensuring your products are always updated.
For more information on Apache Tomcat updates you can follow the URL:
http://mail-archives.us.apache.org/mod_mbox/www-announce/202101.mbox/browser
The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary.
PDF Download: Apache Releases Security Advisory for Tomcat.pdf
References
Apache Tomcat (14th, January, 2021). Retrieved from Apache Tomcat
Apache Releases Security Advisory for Tomcat(15th January,2021). Retrieved from US.Cirt, CISA
https://us-cert.cisa.gov/ncas/current-activity/2021/01/15/apache-releases-security-advisory-tomcat