Given that this is a desktop app, only the latest version will be supported with security updates, unless there is a good reason to backport a fix to an older version.
To report a vulnerability, please file an issue. If you feel the need to report it privately, you may use the private vulnerability reporting feature of this GitHub repository.