Until the 1.0 release, we will not provide patches for old minor versions in the case of a security vulnerability. Patches will be made available for the latest minor version.
Any potential security vulnerabilities should be reported privately. We will aim to acknowledge all submitted reports within 72 hours and provide a fix where necessary as soon as possible.