If the third-party provider has not patched the vulnerability, or has not stated it is safe to play, you should assume the vulnerability is not fixed and you are at risk by playing.
In these cases, we recommend following the advice of your third-party provider. Modified clients and third-party launchers might not be automatically updated.
Modified clients and third-party launchers
Start the Launcher again – the patched version will download automatically. If you play Minecraft: Java Edition, but aren’t hosting your own server, you will need to take the following steps: Close all running instances of the game and the Minecraft Launcher.