The Charmed Kubeflow project releases with a cadence of ~6 months, supports the latest two minor versions of Kubeflow, and keeps up to date with the upstream project. Whenever a new version of Kubeflow is released, a new version of Charmed Kubeflow is also released, and the oldest version is dropped from support. Please also to Supported versions for details on the actual versions.
To report a security issue, file a Private Security Report with a description of the issue, the steps you took that led to the issue, affected versions, and, if known, mitigations for the issue. The Ubuntu Security disclosure and embargo policy contains more information about what you can expect when you contact us and what we expect from you.