The following versions of semver are currently supported:
| Version | Supported | 
|---|---|
| 3.x | ✅ | 
| 2.x | ❌ | 
| 1.x | ❌ | 
Fixes are only released for the latest minor version in the form of a patch release.
You can privately disclose a vulnerability through GitHubs private vulnerability reporting mechanism.