All active streams should be updated to 1.0.2t or 1.1.1d to address security fixes..
You should verify relevant updates have been made to puppet-runtime and a new runtime containing the updates has been promoted to bolt.
runtime update: https://github.com/puppetlabs/puppet-runtime/commit/d9effeac06a21d42406b67d20e3a23ee022553a1
bolt contains latest puppet-runtime: https://github.com/puppetlabs/bolt-vanagon/blob/master/configs/components/puppet-runtime.json