We primarily support the latest version only. For serious security issues, we'll patch several older versions too.

Please report security issues privately, via email, to contact@orchardcore.net.