Only the latest stable version is supported.

Preferably, report the vulnerability privately using GitHub (documentation).

If you do not want to use GitHub, send an email to security AT miniflux DOT net with all the steps to reproduce the problem.