Only the latest stable release receives security updates.
If you discover a security vulnerability, please open a private issue or contact us directly. Do not disclose it publicly until a fix has been released.
You can expect an initial response within 48 hours.