Currently we support versions 2.0.0 and above of hummingbird. These will receive security updates as and when needed.
If you believe you have found a security vulnerability in hummingbird please do not post this in a public forum, do not create a GitHub Issue. Instead you should submit a security advisory via GitHub with details of the issue.
To see how we respond to a security vulnerability report you can read our incident_response.md document.