We will dive into any security related issue as long as your Magento version is still supported by Magento. If you are running a Magento version that is not supported by Magento and you wish to upgrade to the latest version, you can contact us for a quote at sales@tig.nl
Please e-mail us directly at security@tig.nl or use the security issue template on GitHub. A security issue gets the highest priority assigned and a reply regarding the vulnerability is given within a typical 24 hours. Thank you!