A new version is released each 6 months. Ocean-rs team only support the latest version of ocean-rs (core and components). Each 4 version, the version will be a LTS and will get support for 1 year (~2versions).

First, don't share your vulnerability publicly. Thanks! Second, send an email to 0xMRTT@tuta.io with [SECURITY]: {title} as object. And describe as many as possible the vulnerability you found.