Information about supported Istio versions can be found on the Support Announcements page on Istio's website.
Instructions for reporting a vulnerability can be found on the Istio Security Vulnerabilities page.
Information about previous Istio vulnerabilities can be found on the Security Bulletins page.