Only the latest release gets fixes.

Please don't open a public issue. Report it privately through GitHub's private vulnerability reporting with the steps to reproduce and the affected version. You'll get an answer there, and the fix is published with an advisory once a release carries it.