As I don't cut versions for this the current trunk branch is the supported version.

You can open an issue to report a vulnerability you encounter. Nothing is high risk enough here to require anything more than that.