The latest released version of Calendar.js is supported.
Please open an issue and give as much detail as possible, and we will respond as quickly as possible.
If the vulnerability is considered valid and accepted, a patch will be made for the latest Calendar.js version. If the vulnerability is deemed invalid, no further action is required.