In this package only the latest major version is generally supported. It's possible to add security patches to the older revisions per request.

For vulnerabilities that should not be disclosured publicily you may contact @qnikst. Vulnerability will be reviewed, fixes will be published for the lastest major version and affected versions that exists in supported stackage LTS snapshots.