https://nvd.nist.gov/vuln/detail/CVE-2024-1597

It seems like Magnolia isn't affected by the vulnerability since it doesn't make use of the vulnerable feature. Also, the parameter that makes the vulnerability possible isn't used and no ordinary user can change it.
Nevertheless, the library will be updated as soon as a fix is made available.