Currently, Pleroma offers bugfixes and security patches only for the latest minor release.

Please use confidential issues (tick the "This issue is confidential and should only be visible to team members with at least Reporter access." box when submitting) at our bugtracker for reporting vulnerabilities.

New releases are announced at pleroma.social. All security releases are tagged with "Security". You can be notified of them by subscribing to an Atom feed at https://pleroma.social/announcements/tags/security/feed.xml.