VLC is only pulling 3.0.20 not 3.0.21 which is latest (from June). This version had a few CVE's resovled.
Hey,
Thank you for reaching out to support.
Yes, this is the reason. VLC have not yet released an update for the .msi installer and they have only offered an update for the .exe installer.
Their approach to feedback about releasing an .msi 3.0.21 seems as like customers might be better off deploying an uninstall for the .msi variant, and installing the .exe variant instead:
3.0.21 x64 msi release - The VideoLAN Forums
MSI Release of 3.0.21 - The VideoLAN Forums
VLC 3.0.21 Windows MSI installer missing from release (#28677) · Issues · VideoLAN / VLC · GitLab
Regards,
Raunak