The project is giving its usual few days' notice: new 26.x, 24.x, and 22.x builds arrive on or just after Wednesday, October 21, and the worst issue patched in each line is rated HIGH. No CVE details yet — those land with the release. If you're still on an end-of-life line, note that those are always affected by a security release and won't get a patch of their own; the fix is to move to a supported line. Book the maintenance window now so you're not scrambling on the 21st. Beyond that, there's nothing to do today.