The latest patch versions of v1 releases are supported for security updates.
Supported versions of PHP for this policy can be found here:
If you believe you have found a security vulnerability, you can report it using the following form:
Please do not report security vulnerabilities publicly until a resolution has been applied.