Only the latest released version of Go Hass Anything will be supported with security updates.
Security issues and vulnerabilities can be reported privately by following the GitHub documentation: Privately reporting a security vulnerability
Security issues and vulnerabilities will be addressed with reasonable effort but no guarantees are made in regard to resolution of reports within any timeframe or a fix at all.