It’s down to the Qualcomm SDK that GL-iNet have used for both the b3000 and the x2000.
GL would need to ask Qualcomm for a newer SDK to update the repositories in the stock firmware.
Add in OpenWrt: Updates close security holes in router operating system
There’s a heap buffer overflow on any device running any Openwrt derivative that is less than 24.10.4.
I’m still checking for GL to patch this on all devices.