Only the latest major version is supported at any given time.

To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.