The following versions are currently being supported with security updates.

Please report privately using Github tools (How to guide)

You should expect a reply to any vulnerability related communication within 1 business day (USA). If vulnerability is accepted a fix will be developed with the goal to be released within at most 14 days. If the fix takes longer than a day to develop you will receive updates on the fix progress (or lack of it) every 2 days. You will also receive an update once fix is released to the public.