We are following Calendar Versioning with generous backwards-compatibility guarantees. Therefore we only support the latest version.
To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.