We only support the latest stable version for security issues. See the releases page.

We ask that you report vulnerabilities privately first:

• Report a vulnerability on GitHub
• or email security@luanti.org

Depending on severity, we will either create a private issue for the vulnerability and release a patch version of Luanti, or give you permission to file the issue publicly.

For more information on the justification of this policy, see Responsible Disclosure.