The following versions are supported:

To report a vulnerability, open an issue in the repository. If you know the fix already, (for example - updating a dependency), then create a PR. I generally merge PRs faster than I work on code.