Is Geoserver actually susceptible to these vulnerabilities?

My friends in our IT department are frequently flagging our Geoserver installation for vulnerabilities in …

(content removed by moderator)

Please see security policy - if you wish to contact us about security vulnerabilities use geoserver-security@lists.osgeo.org for private communication.

Got it. Apologies for the screw up. Thanks for your help!