The latest released version of jQuery is supported.

Please email security@jquery.com, and we will respond as quickly as possible.

If the vulnerability is considered valid and accepted, a patch will be made for the latest jQuery version. If the vulnerability is deemed invalid, no further action is required.