Support policy for previous releases

Hi folks,

is there any documentation about how previous major and minor releases of Grafana (Open-Source) are supported with security fixes or critical bug fixes?

For example in case of CVE-2020-13379 there were fixes for 6.7 and 7.0, but not for earlier major versions and other minor versions of 6.x.

Kind regards,
Matthias