These are the versions currently supported with security updates.

Should you discover a vulnerability, you should not open an issue. Please email hello-open-commerce@mailchimp.com. We will work with you directly and correct the vulnerability and then make an announcement once a release is available.