For security fixes only the latest version released to NPM and current version at
master branch are supported.
Before reporting please check if this vulnerability exists in latest versions too.
For reporting please open a issue or pull request on github. If it should be discussed privatly please open a issue and ask so to get feedback from a maintainer.
Report security bugs in third-party modules to the person or team maintaining the module. You can also report a vulnerability through the Node Security Project.