We are currently supporting the latest released version of Gaphor.
Gaphor has GitHub's Private Security Vulnerability Reporting enabled. Please go to the Security tab to report security vulnerabilities. For more information, please see the GitHub docs on privately reporting.