Only the latest release (the main branch, https://voltviz.com and the latest Docker image) receives security fixes.

Please report vulnerabilities privately by email to the contact in https://voltviz.com/.well-known/security.txt. Do not open a public issue. Include the affected version and steps to reproduce.