Only the latest 7.x release gets security fixes.
| Version | Supported |
|---|---|
| 7.x | ✅ |
| < 7.0 | ❌ |
Do not open a public issue for a vulnerability.
Report it privately through GitHub: open a private vulnerability report.
We fix the vulnerability, release a new version, and then publish a GitHub security advisory.