Since the public API is kept being mostly backward compatible (no breaking changes introduced for a while), the only latest version is supported for now.

If you found any vulnerability, you can use any convenient way to report obtained vulnerabilities. Primarily via email in the ReadMe, but it's also possible to use the "Security" tab to report the vulnerability privately, or use the GitHub Issues to publicly report the non-critical issue.