The last 3.x minor release of Canton is supported. Canton 2.10 is supported as a LTS release.

In general: If you suspect that your issue has a security impact, do not use the public issue tracker.

Instead report a vulnerability for the following products through Github private vulnerability reports:

• Daml
• Canton Ledger
• Canton Network and Splice

Please follow our responsible disclosure policy: https://www.digitalasset.com/responsible-disclosure

For any other security inquiries please contact: security@digitalasset.com.