Only the current major version of the project receives security updates. Security updates will be issued as part of a patch release.

Please report (suspected) security vulnerabilities to justintadlock@gmail.com. If the issue is confirmed, a patch will be released as soon as possible.