Only the latest release will receive guaranteed security updates until the project reaches version 1.0.0.

If you find a vulnerability, please report it to navendu@apache.org.