Because 5.6.40 is EOL, any vulnerability discovered after Jan 2019 remains unpatched in this version. Notable examples: