Security updates are always made for the latest version of CVE Binary Tool.
Older versions often have outdated mechanisms for getting NVD updates and cannot be supported.
Security issues with the tool itself can be reported via Github's private security reporting mechanism.
If in the course of using this tool you discover a security issue with someone else's code, please disclose responsibly to the appropriate party.