The most recent major release is supported.

If you find a vulnerability, please email me at me@slavetomints.com. You can expect to receive a response within a week. If your vulnerability is accepted you will be credited on the demo site after it has been patched.