If a security issue occurs, only the latest versions of v3.x and v2.x are guaranteed to be patched.

To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.