Security Vulnerability Roadmap Inquiry

[ClarkR4]

JMeter team, my program is currently running version 5.6.3. Our scanners have identified multiple critical, high, and medium vulnerabilities, to include log4j findings.

I've not attached the scan information in order to stay in compliance with the security vulnerability reporting guidelines, but is there a publicly accessible log of expected dependency updates? Additionally, is there an estimated date for the next JMeter release?

I can share specific vulnerabilities in this issue or via email if necessary.

[andreainnocenti]

There are several open issues on this topic since years... it seems that the vulnerabilities are not important.

[milamberspace]

Send report on [email protected] pls