Only the latest release is supported.
Please report a vulnerability privately, with the "Report a vulnerability" button under the Security tab of the repository, and not in a public issue. Say which version you ran, how to reproduce the problem, and what it lets an attacker do. A report is answered as soon as the maintainers can, and a fix is released before the details are made public.