These versions are currently being supported with security updates.

if you stumble uppon a security vunerability, you should report it with a new issue

A response of a vulnerability will come in 1-2 weeks from the report. If the vulnerability report is accepted, fixing of said vulnerability will initiate, if it is declined, the issue will be closed and the reporter will be notified with an explanation.