Only the version currently marked as ‘latest’ receives security updates. All versions that are not marked as ‘latest’ do NOT receive security updates.
Once a security vulnerability has been found and fixed, a new version of the software with the fixes is released.

If you want to report a security vulnerability, create an issue on GitHub and use the ‘Security’ label to mark the issue as a report. Once a security vulnerability has been reported, it will be fixed as soon as possible. However, this may take some time. No specific time frame can be given, as there are limited resources available.