The most resent version of the library is supported.

In order to report a vulnerability please reach out to security@naisho.org.

Unfortunately we don't offer any bug bounty since we are a bootstrapped business.