onCourse does not currently have a LTS branch, and is released typically on a fortnightly basis. Therefore, we support only the latest release for security fixes.

In the first instance, send an email detailing the security issues you have discovered to [email protected] and it will be reviewed and prioritised by our support team. Make sure you clearly mark the issue as a vulnerability and describe what the potential security issue is.

You should receive a response within 48 hours with an outline for what we plan to do next or whether we need any further information to reproduce or identify the problem. You can expect us to take any vulnerability seriously and provide a fix or workaround as quickly as possible.