No version of COVID-19 Bot except for v5 will recieve security updates.

DM 0/0#0001 on Discord with details on your suspected security vulnerability.

You'll get a response typically within 24 hours, but sometimes longer. If your vulnerability is accepted, a update will be pushed within 3 days to fix it.