We will only maintain one branch which is the master branch. Unless otherwise requested, no security patches will be applied to older Major/Minor versions.
For a vulnerability of low to no severity, which causing no threats to security, you may report it openly to us by opening an issue
If the vulnerability you are reporting inflicts some security impact, please do so privately.