Latest #MediaWiki security release is in #Debian unstable now: https://tracker.debian.org/news/1155620/accepted-mediawiki-11318-1-source-into-unstable/

We're not planning to issue a security update for this given that it's not exploitable using the set of extensions available in Debian. It'll get bundled with the next one...