Just dropped two RCs, with XXE mitigations on by default 5.4.2.14-RC (will be our latest stable release) 5.3.11.3-RC (just XXE and admin update notification improvements on top of 5.3.10.143-SNAPSHOT)