At the moment, the only supported version of the WPF UI is the newest one. You can find it on NuGet.
https://www.nuget.org/packages/wpf-ui/
Security issues and bugs should be reported privately, by emailing support (at) lepo.co
lepo.co does not offer Bug Bounty for the WPF UI library.
Please do not open issues for anything you think might have a security implication.