Security fixes and updates are applied to the master branch but they are not backported to older releases.

Report any vulnerability as an issue including context information and which files, features, or dependencies are impacted.