Security updates are applied only to the latest release.
Please disclose it at our security advisory.
This project is maintained by a team of volunteers on a reasonable-effort basis. As such, vulnerabilities will be handled and/or disclosed in a best effort base.