Only the latest stable version is supported for security updates.
A vulnerability can be reported through GitHub's private security reporting feature at Security. Alternatively, an email can be sent to one of the maintainers, e.g., at m.laveaux(@)tue.nl. We will try to confirm the vulnerability and respond back, and then decide how to deal with it.