We do not actively support patches onto previously released version of the plugins repository. Instead we recommend all users upgrade to the latest release as it comes out.
Please report (suspected) security vulnerabilities to security@trunk.io. You will receive a response from the team within 48 hours. If the issue is confirmed, we will create a new release as soon as possible.