Backporting libcurl updates?

Our sys admins have flagged the libcurl that ships with Julia for security issues. They are asking us to update to at 8.21.0. I see that it got merged into master a little while ago: curl: New version 8.21.0 - Pull Request #62251 - JuliaLang/julia - GitHub. I don’t see it in any of the “backport” issues, though. Is it possible for that to be backported as well? We were able to build from source and specify a different version of libcurl, but I’d love to keep using juliaup instead.