No version is officially supported since this is a community-driven open-source project. However, we aim to keep the latest version up to date.
Thank you for wanting to report a vulnerability. To get in touch, please go to Tricities Media Group's contact form and select "Security" as the purpose. This will go straight to one of the maintainers.
If this is a vulnerability of an upstream dependency, we certainly want to do what we can to update those dependencies to minimize the risk to our users.
Thanks!