how to stay up to date with new CVEs?

Hello everyone! I wanted to ask if you use any tools for discovering new vulnerabilities in the products that are part of your infrastructure. If you do, I would greatly appreciate it if you could share them with me.
As an example, I have gitlab and tomcat at my disposal, and it would be cool if you can set up a newsletter that will notify me if the words "gitlab" and "tomcat" appear in new CVE.
(please do not advise …

cves cybersecurity gitlab hello infrastructure products share tomcat tools vulnerabilities