pg_stat_monitor project follows rolling release strategy. So all security updates go to new versions.

Please report any vulnerabilities to our project in Jira.

If the vulnerability is accepted and confirmed by our experts, you should normally expect us to deliver a version with a fix according to the timelines provided below:

• Low/Medium: 120 days
• High: 90 days
• Critical: ASAP but should not exceed 30 days