The "Privacy" minded @purism (https://puri.sm) runs a Mastodon instance that is still running version 3.1.1 (https://social.librem.one) which is not patched from any of the recent vulnerabilities that were released (https://github.com/mastodon/mastodon/security)