Since RebornXP is a webOS, only the latest version (v2.0) release 1.01 is officially supported.
If you find a vulnerability in RebornXP, and if you think you can contribute to remove that vulnerability, feel free to start a pull request. If you want to report it, start a new issue in the Issues tab of the repo.
Thank you for contributing to RebornXP!