All versions are supported at this time. Once we hit version 2.0, we'll support current version minus 1.
To report a vulnerability, send an email to me ianwilson org and give me about 48 hours.
You could also submit a pull request. I'll send you some DMS swag or give you a month's membership at your local hackerspace :)