Only the latest stable version is supported.
Preferably, report the vulnerability privately using GitHub (documentation).
If you do not want to use GitHub, send an email to sec
2D77
urity AT miniflux DOT net with all the steps to reproduce the problem.