As Bandit is still in active development (its major version is still 0), no formal support exists for any version earlier than the most recently released version.

Security disclosures should be sent privately to mat@geeky.net.