We only add security updates to the latest MAJOR.MINOR version of the project. No security updates are backported to previous versions. If you want be up to date on security patches, make sure your SimpleLogin image is up to date.
If you want to report a vulnerability, please take a look at our bug bounty program at https://proton.me/security/bug-bounty.