Several release are being published today:
We are following our security policy to release stable and maintenance releases concurrently in response to a security vulnerability. Details of the vulnerability will be shared on Monday 2 June, providing everyone time to update.
--
GeoServer Project Steering Committee
I don’t think this was published yet?
The disclosure was postponed until 9 June (tentatively).
Peter
Information on CVE-2025-30220 is now available.
This CVE is covered as part of today’s blog post update: June 2025 Vulnerability Disclosures
After discussion between security researchers last week issue was downgraded from critical to high. So we had a slightly more urgent response (release stable and maintenance branches concurrently).
We advise everyone to stay up today, and release announcements that address security vulnerabilities are clearly indicated.