Normally only the latest major version is supported.
If you believe you have discovered a security issue, please email galaxy-committers@lists.galaxyproject.org. Please use [SECURITY] in the email title.
Alternatively you can report a security vulnerability using GitHub private reporting.
We ask that you not disclose security issues publicly. We will provide you credit for the discovery when publicly disclosing an issue you reported.