Security updates are always created based on the latest release.

Please use the possibility to privately report security issues:

https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability