See title.  My company's automatic vulnerability scanning has been flagging the following file in my download of Atlassian bamboo DC 10.2.1

atlassian-bamboo\web-inf\lib\struts2-core-2.5.33-atlassian-1.jar

https://www.herodevs.com/vulnerability-directory/cve-2024-53677

The vulnerability is listed as critical, but I don't see any reference to it in any security bulletins put out by Atlassian.   Has bamboo been checked against this vulnerability?  Is there any possibility of updating the version to appease security scanners?