Only the latest version of Fabricate will recieve security updates. These will be released as new versions of the module.
You can report a vulnerability by opening an Issue. We aim to respond to vulnerability reports within 2 weeks of submission. If your report is accepted, the work to resolve it will be estimated and a projected date given at that time.