Last stable version of Stats Service always provides security updates.
If you think you have found a potential security issue in Stats Service, do not open directly a GitHub issue. Please email us. You can contact opensource@nc3.lu.
You can also specify how you would like to be credited for your finding (commit message or release notes for the new release). We will respect your privacy and will only publicize your involvement if you grant us permission.