sorry one more change to disclosure order to align with release order

Author: jodygarnett

_posts/2025-06-10-cve-disclosure.md

@@ -24,15 +24,14 @@ The GeoServer community has readied the following CVE vulnerabilities for public
 * [CVE-2024-40625](https://github.com/geoserver/geoserver/security/advisories/GHSA-r4hf-r8gj-jgw2) Coverage REST API Server Side Request Forgery (Moderate)  
   Fixed: 2.26.0
 
-* [CVE-2024-34711](https://github.com/geoserver/geoserver/security/advisories/GHSA-mc43-4fqr-c965) Improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF) (High)  
-  Fixed: 2.25.0
-
 * [CVE-2024-29198](https://github.com/geoserver/geoserver/security/advisories/GHSA-5gw5-jccf-6hxw) Unauthenticated SSRF via TestWfsPost (High)  
   [CVE-2021-40822](https://github.com/geoserver/geoserver/security/advisories/GHSA-68cf-j696-wvv9) SSRF in TestWfsPost for specific targets, e.g. PHP + Nginx (High)  
   Fixed: 2.25.2 | 2.24.4
 
   This duplication is due to CVE-2021-40822 being generated prior to our use of CVE records.
 
+* [CVE-2024-34711](https://github.com/geoserver/geoserver/security/advisories/GHSA-mc43-4fqr-c965) Improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF) (High)  
+  Fixed: 2.25.0
 
 The following release announcements have been updated: