Only the latest stable version is supported for security updates.
A vulnerability can be reported through GitHubs private security reporting featured at Security. Alternatively, an email can be send to one of the maintainers, e.g., at m.laveaux(@)tue.nl. We will try to confirm the vulnerability and respond back, and then decide how to deal with it.