Release 7.x-1.1.
Mass Password Reset - Less critical - Insecure Randomness - SA-CONTRIB-2018-043
TFA Basic plugins - Less critical - Insecure Randomness - SA-CONTRIB-2018-044
Generate Password - Less critical - Insecure Randomness - SA-CONTRIB-2018-042
Custom Tokens - Critical - Arbitrary PHP code execution - SA-CONTRIB-2018-041
Couple bug fixes and make sure that permissions are flagged for restricted access.
Also it was beta for so long that it only makes sense to graduate the version.
Security Update as per https://security.drupal.org/node/166300