There are two later versions of Drupal available to us:
11.2.8: https://www.drupal.org/project/drupal/releases/11.2.8
11.3.1: https://www.drupal.org/project/drupal/releases/11.3.1
In January, we'll need to discuss if/when we should move forward with a Drupal Upgrade (and which one to use). From initial discussions with Erik, 11.2.8 does remediate some moderately critical Drupal vulnerabilities that impact EBMS.