[java-sig-commits] [Bug 2181443] New: CVE-2023-28708 tomcat: not including the secure attribute causes information disclosure [fedora-37]