We support the latest release with security updates.

We retain the discretion to backport security updates, this is decided on a case-by-case basis.

🚨 To report a vulnerability, DO NOT open a pull request or issue or GitHub discussion. DO NOT post publicly.

Instead, report the vulnerability privately via the Security tab on graphql-java GitHub repository. See instructions at https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability