At the moment, the only supported version of the Camunda MCP is the newest one.
Security issues and bugs should be reported privately, by emailing support (at) lepo.co
lepo.co does not offer Bug Bounty for the Camunda MCP library.
Please do not open issues for anything you think might have a security implication.