Security Policy Supported Versions Only the latest release. Reporting a Vulnerability Open an issue or a pull request. Label as 'vulnerability'. Check API general design before reporting, as some vulnerabilities, like lack of input validation, may be intentional.