The latest version (as specified in the releases for this repository) is always the supported version.
To report a vulnerability, use github's report function, or send an email to d10sfan+luxtorpeda@gmail.com with the necessary information. Maintainers will respond as soon as possible and resolution depends on how large the issue is.