So, just want to clarify that if you want to consider your business, clients, etc to be running on a supported version of Lucee, please update to the latest 5.4 release.
The latest 5.3 release, currently 5.3.12 will receive further security updates, when possible.
Please understand and take action, Lucee 5.4 has had all the underlying java libraries updated, so if a zero day vulnerability occurs which cannot be easily patched due to old java libs, etc, the Lucee team will patch and release the 5.4 release immediately and then potentially the latest 5.3 stable release later, if both feasible and possible
If you are still running older releases like 5.3.7, 5.3.8, 5.3.9 (or earlier) which just received emergency releases, you should be planning to update to 5.4.3.2 immediately
If there is a blocker which is preventing you upgrading, let us know
And please consider sponsoring the Lucee project if you haven’t already!
Thanks for your understanding