Only the latest non-prerelease version is supported.

To report a security vulnerability:

You can directly propose a GitHub security advisory on the Flit Security page of GitHub:

https://github.com/pypa/flit/security

You can use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.

If you are a Tidelift subscriber, this is the preferred path.