As this is a "made by community for the community" project, only the latest release is supported. See also the version support matrix in the README.
Please write an email to security@dataverse.org to responsibly disclose any security issues. Thank you!