Security Policy Supported Versions Only the latest release, whatever that is when you are reading this. If you find a vuln, verify against HEAD before reporting. Reporting a Vulnerability File an issue. This is not critical software that needs private disclosure.