These versions are currently being supported with security updates.

Create an Issue with label security to report a vulnerability.

You should expect a response to be made within 3 days after an Issue is reported. Update through the Issue will be made in timely manner.