Update maven modular stream on RHEL8

RedHat has Errata available for the current maven package (RHSA-2022:4797)
But maven is a module and pinned to version 3.5, therefore never updated.
It is also protected by package lock.

Expected outcome:
Maven module repos to be updated to higher versions, as it seems to be installed with foreman.
Or is it save to enable higher version manually?

Foreman and Proxy versions:
foreman.noarch 3.5.1-1.el8

Foreman and Proxy plugin versions:
katello.noarch 4.7.0-1.el8

Distribution and version:
Red Hat Enterprise Linux release 8.7 (Ootpa)

Other relevant data:
dnf module list maven
Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)
Name Stream Profiles
maven 3.5 [d][e] common [d]
maven 3.6 common [d]
maven 3.8 common [d]

3.5 has been patched for CVE-2022-29599 with Red Hat Customer Portal - Access to 24x7 support and knowledge

maven is not installed on my foreman server. The maven 3.5 module is enabled by default. That’s all…