We are not maintaining multiple branches, so all fixes will be committed to head and included in the next release.
We take great care to maintain backwards compatibility, so we expect our users to use the latest version.
If you discover a security vulnerability in libzip that you deem to be too sensitive to disclose publicly, please create a security advisory on GitHub.
For less sensitive reports, you can also open an issue or pull request on GitHub.
You can reach us per email at info@libzip.org.