A tomcat security update has been released for CentOS 7.

CESA-2020:2530 Important CentOS 7 tomcat Security Update

CentOS Errata and Security Advisory 2020:2530 Important

Upstream details at : https://access.redhat.com/errata/RHSA-2020:2530

The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )

x86_64:
1a682ecdfdca8179b910e4ad1364c7ea7af6484572fa4c0bf786d78a32b2352f tomcat-7.0.76-12.el7_8.noarch.rpm
3fbf1ba29d42285e346eea1daf56195b30a3e94182dc36be98483cd12cbd21cc tomcat-admin-webapps-7.0.76-12.el7_8.noarch.rpm
0e0d2a192959f0e924276b1a404f1696e4c8f489e745d0f759efae4b2e712533 tomcat-docs-webapp-7.0.76-12.el7_8.noarch.rpm
150fbb8d578feb9baac913edd690284b9723f51a4ef734cb834bd87b19eb6110 tomcat-el-2.2-api-7.0.76-12.el7_8.noarch.rpm
919467bef774bb63bf51ec63c3758c1b0a98fed3d3ba41eaf9da630bc7e7932a tomcat-javadoc-7.0.76-12.el7_8.noarch.rpm
4119baf0bb201bf72b2e037b2df5af8a2f03d88341a41e6af7310429daded8f4 tomcat-jsp-2.2-api-7.0.76-12.el7_8.noarch.rpm
1c864d58ea8b2a77959443e02fd45cd9424414ac02881ae7db8fb1f7abee126c tomcat-jsvc-7.0.76-12.el7_8.noarch.rpm
6d203bb8a91bda83c4ec3973e3bc72f428675e7c3a0f33363e535c92f56c5395 tomcat-lib-7.0.76-12.el7_8.noarch.rpm
b02d127bdaef8b0e305453b6bdf3479008875b1f574b172429d5ead159591733 tomcat-servlet-3.0-api-7.0.76-12.el7_8.noarch.rpm
d307e0fd8ecc96b206c97fe1e7003080cfc6a4d5f90d73a4aecbafd14f48c023 tomcat-webapps-7.0.76-12.el7_8.noarch.rpm

Source:
d18613ee3eff59b1223761f5843b528d137200f7ee6e7d66e4dde770fb164115 tomcat-7.0.76-12.el7_8.src.rpm