Venus v3.85 has been released.
As you might have read in the news or from the VRM pop-up, PHP released fixes for a critical bug yesterday. It will have less impact for GX devices than for web servers, since most will not be accesible directly over the internet, but it is a good thing to have this patched as soon as possible.
The intermediate certificates being compromised is also critical (although there is no official rating, since there is no CVE assigned because of its nature). It makes man in the middle attacks for https connections possible.
The Node.js issues are rated as high (but like PHP an attacker must be able to reach the device in the first place).
So this is a bit an unusual release, but solves these vulnerabilities. The public changelog still has to be written. So that will follow later (This is rather technical description obviously).