fixing vulnerabilities for tomcat catalina