We are using the foundation jar file for building components and the version available is 5.6.4.
The issue today is the dependencies like commons-httpclient still has older version 3.1 which have security vulnerabilities.
Can you please post this question in the main AEM forums:
this is the DTM forum.
Thanks. I'll add it there