Hi @Mei-Fang Chang
Welcome to the Atlassian community! I would look into the following versions:
Confluence 9.2.26 or later: As 9.2 is a Long Term Support (LTS) release, Atlassian typically updates the bundled Tomcat in subsequent bugfix versions.
Confluence 10.2.10 or later: These are the most recent releases as of late April 2026 and are the most likely to include the latest Tomcat security patches.
While it is technically possible to replace the Tomcat binaries in your installation directory, Atlassian strongly discourages this and I never did it.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.