Whilst in pre-release the supported versions is just a very rough guide.

• The best way to report a vulnerability is through the issues tab on GitHub but note that since this is a personal project for me (@wolffshots) so resolution of security issues may take some time.
• The alternative is to just fork the repo, make a patch and create a PR and I'll review and merge.