Only the latest major semver version is supported.
Please use the Github private vulnerability reporting system to securely report any vulnerabilities:
https://github.com/meduketto/iksemel-rust/security
While I cannot give any guarantees, these reports will have the highest priority amongst my open source project tasks.
There is not a bug bounty program.