HiĀ @Mei-Fang Chang
Welcome to the Atlassian community! I would look into the following versions:
Confluence 9.2.26 or later: As 9.2 is a Long Term Support (LTS) release, Atlassian typically updates the bundled Tomcat in subsequent bugfix versions.
Confluence 10.2.10 or later: These are the most recent releases as of late April 2026 and are the most likely to include the latest Tomcat security patches.
While it is technically possible to replace the Tomcat binaries in your installation directory, Atlassian strongly discourages this and I never did it.
Thank you!
It looks like you're new here. Sign in or register to get started.