https://tomcat.apache.org/security-10.html Some of these advisories also contain commit information which we can capture with our latest models.