To report a vulnerability please use Github's Security Advisories. In general only the latest minor version is actively supported. However, depending on the severity of a vulnerability, fix for older versions could be considered.