Any version after the first release (1.0) is qualified for vulnerability reporting.

Please create a new security vulnerability issue and I will review it as quickly as I can.