We currently support the latest commit on master.
Please email security@yomu.app with details. We will acknowledge receipt within 72 hours and aim to provide a fix within a reasonable timeframe. Please do not disclose publicly until a fix is released.