| Version | End of support for security updates |
| ------- | ----------------------------------- |
+| 4.2.x | 2024-11-24 |
+| 4.1.x | 2024-08-05 |
+| 4.0.x | 2023-11-02 |
| 3.7.x | 2023-04-05 |
-| 3.6.x | 2022-12-12 |
-| 3.5.x | 2022-06-05 |
-| 3.4.x | 2021-10-24 |
## Reporting a Vulnerability
## List of Previous Incidents
* 2020-05-04 - [SQL injection issue on /details endpoint](https://lists.openstreetmap.org/pipermail/geocoding/2020-May/002012.html)
+* 2023-02-21 - [cross-site scripting vulnerability](https://nominatim.org/2023/02/21/release-421.html)