Any, latest stable versions
You can report a security related bug in the GitHub bug tracker or by email.
All information will be made public. We do not withhold information from users because they need accurate information to access risk and place controls to remediate the risk.