The following table should clarify which versions are currently supported:

To report a security issue, please email the administrator with a description of the issue, the steps you took to create the issue, affected versions, and, if known, mitigations for the issue.

Our "vulnerability management team" will respond within 14 working days of your email. If the issue is confirmed as a vulnerability, we will open a Security Advisory. This project follows a 90 day disclosure timeline.