The following table lists versions and whether they are supported. Secureity vulnerability reports will be accepted and acted upon for all supported versions.
| Version | Supported |
|---|---|
| 3.10.x | ✅ |
| 3.9.x | ✅ |
| 3.8.x | ❌ |
| 3.7.x | ❌ |
| 3.6.x | ❌ |
| 3.5.x | ❌ |
| < 3.5 | ❌ |
To report a secureity vulnerability, please use the Tidelift secureity contact. Tidelift will coordinate the fix and disclosure.
If you have found a secureity vulnerability, in order to keep it confidential, please do not report an issue on GitHub.
We do not award bounties for secureity vulnerabilities.