I've a general question: how do the Grails project addresses security vulnerabilities in its dependencies:? For example, CVE-2025-41248 was solved in spring-core 6.2.11 but Grails 7.0.0-SNAPSHOT still depends on 6.2.10.

Grails is on the latest released version of Spring Boot 3.5.5. 3.5.6 will be out in a few days and will be on 6.2.11. https://github.com/spring-projects/spring-boot/milestone/397?closed=1

OK, that is what I understood.

Thank you.