The latest 3.x version of docxtemplater is the one that will be supported.
This version will have security bugfixes until at least 31/12/2025.
To report a vulnerability, please use the "contact us" button on https://docxtemplater.com/
You should get an update on the reported vulnerability within 48 hours.
The fix will come in quickly, within one week.