Only the latest release is supported.

After releasing new major version, we support old major for a year.

To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.