Any version after the first release (1.0) is qualified for vulnerability reporting.

Please create a new security vulnurability issue and I will review it as quickly as I can.