File an issue with the security label. As with any issue, please include all the relevant information: blip version, setup/configuration, details of the security issue, and so on. We will assess the issue and prioritize the fix based on the severity off the issue.

Only the latest major version is actively supported. User-submitted PRs for older versions are welcomed if they security-specific fixes that do not change previous features or functionality.