If Umbraco 10 is still in the security phase... Shouldn't there be a V10.8.8 which is not vulnerable? https://www.nuget.org/packages/Umbraco.Cms.Core/10.8.7

The vulnerability is currently disputed. We have been unable to replicate so far. https://nvd.nist.gov/vuln/detail/CVE-2024-10761

Ok thanks for the update!