Thank You Yuxing Wu,

Are these vulnerabilites only fixed in Liferay Portal 7.3 GA7? 

Sadly our customer decided to take a try with 7.3.5 GA6.

Is the patch already included in last official docker image of 7.2?I see it's updated 2 days ago.

https://hub.docker.com/r/liferay/portal/tags?page=1&ordering=last_updated&name=7.2

Up to this point, the maximum scale for any given service has been capped at 10 instances. This was a platform restriction that was based on most use cases for the portal. Recently, however, there was a need to dynamically scale to more than 10 liferay instances. To address this need, and allow autoscaling to much larger cluster sizes, we have introduced a property to set the maximum number of instances that a service should have.