Only the latest release of 97 gets security fixes.
To report a vulnerability, use GitHub's private vulnerability reporting rather than a public issue. Include steps to reproduce, the affected file or skill, and the harness you saw it in (Claude Code, Copilot CLI, or OpenCode).