Security Vulnerability Roadmap Inquiry

JMeter team, my program is currently running version 5.6.3. Our scanners have identified multiple critical, high, and medium vulnerabilities, to include log4j findings.

I've not attached the scan information in order to stay in compliance with the security vulnerability reporting guidelines, but is there a publicly accessible log of expected dependency updates? Additionally, is there an estimated date for the next JMeter release?

I can share specific vulnerabilities in this issue or via email if necessary.