We don't have multiple supported branches.
We support the latest release, and will create a new release with a security update.
The latest release is always on the prod branch.
Current development happens on the test and dev branches.
To report a vulnerability, please write to info@openpetra.org.
If the vulnerability is accepted, you will get a warm fuzzy feeling that you made this world a better place.
Honestly, thank you!