Only the most recent major version is regularly updated and receives security fixes.
Please use the project's private vulnerability reporting feature to report any vulnerabilities. For more information, see privately-reporting-a-security-vulnerability