These versions are currently being supported with security updates.

Minor vulnerabilities can be reported as issues. For major or servere vulnerabilities either contact tomhollingworth directly, or raise an issue. Turn around time for accepted security fixes are up to 2 weeks, with most completed within 3 days of reporting.