GeoServer 2.22.6 is announced for those continuing to operating in a Java 8 environment.
The 2.22.x series has previously reached end-of-life, this release was made to take advantage of Java 8 GeoTools 28.6 update published on behalf of the GeoNetwork project.
Records CVE-2024-36401 updated for GeoServer 2.22.6 and CVE-2024-36404 updated for GeoTools 28.6 allowing scanning tools to identify these issues as addressed. See statement for background information.
Thanks to Jody Garnett (GeoCat) for making this release.