Pulsar maintenance releases for supported version series 3.0.x, 4.0.x (current LTS) and 4.2.x are on their way: https://apache-pulsar.slack.com/archives/C5ZSVEN4E/p1776956136214819 A major change that will land in 4.0.10 is the upgrade to Jetty 12.1.8 which is required for CVE fixes.