Expr is generally backwards compatible with very few exceptions, so we recommend users to always use the latest version to experience stability, performance and security.

We generally backport security issues to a single previous minor version, unless this is not possible or feasible with a reasonable effort.

If you believe you've discovered a serious vulnerability, please contact the Expr core team at anton+security@medv.io. We will evaluate your report and if necessary issue a fix and an advisory. If the issue was previously undisclosed, we'll also mention your name in the credits.