For now, we don't have any production (release) version, but only latest version will receive updates, including security updates.
This is a community project so don't have any expectactions.
If you have found a vulnerability, please submit a ticket/issue.