We try to apply security updates as fast as possible and we support Node.JS versions from the list here.

To report vulnerability we advise you to report it in Issues section.