Only the latest release of each app gets fixes. The apps update themselves.
Please don't report security problems in public issues. Use GitHub's private reporting instead: the Security tab, "Report a vulnerability".
Include the app version, what an attacker could do (for example with a crafted package, a crafted site response or an app link), and steps to reproduce it. You'll get a reply within a few days. Once fixed, the issue is published as a security advisory, with credit to you if you want it.
Problems with a website or its API belong to that site: for Baza Spolszczeń, use its contact form.