The latest released version of jQuery is supported.
Please email security@jquery.com, and we will respond as quickly as possible.
If the vulnerability is considered valid and accepted, a patch will be made for the latest jQuery version. If the vulnerability is deemed invalid, no further action is required.