Upgrade tomcat embed dependency

This will resolve a dependency risk.
The risk is a non-issue because no tomcat server is actually being
operated, but this will resolve some noise in the dependency risks.

Author: anton-haubner-sonarsource

java-jsp/pom.xml

@@ -32,7 +32,7 @@
     <dependency>
       <groupId>org.apache.tomcat.embed</groupId>
       <artifactId>tomcat-embed-jasper</artifactId>
-      <version>9.0.106</version>
+      <version>9.0.108</version>
       <exclusions>
         <exclusion>
           <groupId>org.eclipse.jdt</groupId>