Only the latest code on main is supported at the moment. In other words: vulnerabilities that don't reproduce on main won't be accepted for now.

Mail your vulnerability to boltsecurity.yarn763@passmail.net. The strange email address is to prevent spam.