CSRF attacks problem on JSF and Primefaces

[hajoglamann]

According to https://stackoverflow.com/questions/78901025/csrf-attacks-problem-on-jsf-and-primefaces, there is a security issue in PrimeFaces (prior to version 14.0.4).
User Melloware wrote that this will be fixed in PrimeFaces 14.0.4. Will this also be fixed in the LTS versions (e.g., PrimeFaces 12-LTS and 13-LTS)?

[tandraschko]

If you can point me to a PrimeFaces issue in GitHub, i can check if it was backported. Usually we backport all security related tickets.

[hajoglamann]

Thank you. My question was meant to be general too. A security check found the aforementioned flaw. It's important to me that all security flaws are also fixed in the LTS version. Otherwise, the LTS version isn't very useful.

[tandraschko]

As i said, we backport all security related issues.

[hajoglamann]

Thank you.