Snagboot does not currently offer long-term support for older releases. Security and bug fixes are applied to the main branch, and included in the next release.
Vulnerabilities may be reported privately if necessary. On the official Snagboot GitHub repository, got to "Security and quality">"Report a vulnerability", and follow the instructions to submit a vulnerability report.