Which versions are currently being supported with security updates?

Reporting a Vulnerabiltiy can be done as an issue or via Twitter. Please feel free to fix the bug, so I only have to merge to decimate vulns as fast as possible.