Since there are no "stable" releases, techncally there are also no supported versions. Reported vulnerabilities will be fixed in the version that was current at the time of the report.
Please use Github's vulnerability report form to privately and responsibly disclose vulnerabilities in this project.