Only lastest two minor version releases are supported for patching security fixes.

Please create a dummy issue with high-level description of the security vulnerability, then report details to security@gogs.io privately, thank you!