We just released Mastodon 4.6.4, 4.5.14 and 4.4.21.
Those updates include multiple security fixes, including fixes for two major issues.
We encourage server administrators to update as soon as possible, as one of the issues can expose PII of local users. We are investigating potential uses of this exploit and will soon share more information.
Full release notes and update instructions are available on the GitHub release page.