All currently supported versions are eligible for security updates. Unsupported/unmaintained versions will no longer receive any updates, not even security ones.
You can find the full list of supported versions here.
For any security/vulnerability issues you may discover, please send us a full report at security@opensips.org.