These versions of BSL are currently being supported with security updates.

To report a vulnerability, create a new ticket under the Issues tab > New Issue button. Give the ticket a descriptive title and put as much info as possible in ticket description like how to recreate the bug. You can tag specific members of the BSL development team (using @) in either the ticket description or as a comment on the ticket. The BSL repo is routinely monitored for new tickets, and once your ticket is found, it will be triaged by a member of the BSL team, who assign it the "bug" label and an appropriate Criticality label (CRIT-1, CRIT-2, etc.) for the severity of issue.