Please refer to https://docs.espressif.com/projects/esp-idf/en/latest/esp32/versions.html#support-periods for more details on ESP-IDF supported versions and support period policy.
Please refer to Espressif Security Incident Response Process on the guidelines to report a security vulnerability. Please do NOT create a public GitHub issue.