Currently the only supported version is the latest patch release of the 2.4.x stable branch.

Apache 2.4 Security Vulnerabilities

For information on how to report a new security problem please see here