All currently supported versions are eligible for security updates. Unsupported/unmaintained versions will no longer receive any updates, not even security ones.
You can find the full list of supported versions in the OpenSIPS Control Panel page, Available versions section.
For any security/vulnerability issues you may discover, please send us a full report at [email protected].