There is only one supported version of the module at any time. You must update to the latest version to stay current with security updates.
You can report a security vulnerability by emailing Andrew Poppe at AndrewBPoppe@gmail.com
Or, you can also open a new issue and select the "Report a security vulnerability" option.