All versions published on the marketplace are supported.

Security issues can be reported to Arne Jørgensen, either by mail, Signal, or any other channel you prefer and trust (see my Keybase profile).