Only the latest release of Helm receives security fixes. Updates ship through the in-app updater and https://github.com/vverma022/helm.
Please use GitHub private vulnerability reporting: https://github.com/vverma022/helm/security/advisories/new
If that doesn't work for you, email hi@egoist.dev.
Please don't open a public issue for anything you believe is exploitable before it has been fixed. Include reproduction steps and the Helm version (Helm → About Helm) you tested.