Only the latest release receives security fixes.

Please use GitHub's private vulnerability reporting feature rather than opening a public issue: Report a vulnerability

You can expect an acknowledgement within 48 hours and a fix within 7 days.