Only the latest version of Bracket will get security upgrades (for now at least).

Please use GitHub's feature for reporting vulnerabilities, see the docs.