1.0.x is the only stable version that exists right now; versions 0.x.x are not supported.

To report a vulnerability, please submit an advisory via GitHub (preferred), email smithereen@grishka.me, or send a message to @grishka on Telegram.