How to fix CVE-2021-28170 Vulnerability in org.glassfish.web:jakarta.servlet.jsp.jstl:3.0.1; cannot find newer library version

Question

The referenced CVE says "...Jakarta Expression Language implementation before 3.0.4..." Implying that a version 3.0.4 is available.

I'm darned if I can find it!

Mavenrepo (https://mvnrepository.com/artifact/org.glassfish.web/jakarta.servlet.jsp.jstl) and maven central (https://central.sonatype.com/artifact/org.glassfish.web/jakarta.servlet.jsp.jstl/versions) only have up to 3.0.1 (the version I am using).

Has anybody tackled this? Any guidance gratefully accepted.