We release patches for security vulnerabilities. We release patches for the last two major versions.

If you found a possible vulnerability, please contact the Plone security team at security@plone.org.