Only the latest major version receives security fixes.

Please do not open a public GitHub issue for security vulnerabilities.

Report vulnerabilities by emailing np@dynamicweb.dk. Include a description of the issue, steps to reproduce, and any relevant code or URLs.

You can expect an acknowledgement within 48 hours and a resolution or status update within 14 days.