Lead time for Security fixes in Open source version

We are planning to use the Open-source version. What in general is the lead time to get fixes for Security vulnerabilities. Thanks

Hello @Shri.Nivas ! Liquibase is released around every 6-8 weeks and in every release all the dependencies are updated plus jvm installer is updated to latest release.
So unless it’s a critical security vulnerability that would require a new release this would be the maximum lead time to get security fixes in.