The latest version is supported with security fixes. In addition, the previous major version's latest is also supported.

To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.