As of January 2022 (and until this document is updated), only the v3.0.0 and v4.0.0 stable releases of Strapi are supported for updates. Any previous versions are currently not supported and users are advised to use them "at their own risk".
- v3 support is limited to Critical/High priority security updates only until September 2022
- v4 is considered LTS until further notice
Please report (suspected) security vulnerabilities to security@strapi.io.
You will receive a response from us within 72 hours. If the issue is confirmed, we will release a patch as soon as possible depending on complexity but historically within a few days.