CF2023 Tomcat 9.0.93 - Security Vulnerability CVE-2025-31651

[lynn___]

My company has just notified me of security vulnerabiltiy CVE-2025-31651 which was recently reported.  The vulnerability appears to affect Tomcat versions 9.0.0.M1 through 9.0.102 and the only mitigation seems to be updating to version 9.0.104 or later.

Does anyone know if Adobe has plans for a CF2023 to update Tomcat in order to mitigate this vulnerability? 

Thank you!

[BKBK]

Adobe's ColdFusion team watches out for Tomcat vulnerabilities, and usually mitigates with a hotfix shortly after they are reported. For more information, send an e-mail to cfsup[at]adobe.com