Please refer to https://github.com/espressif/esp-now/blob/master/User_Guide.md#support-periods for more details on ESP-NOW supported versions and support period policy.
Please refer to Espressif Security Incident Response Process on the guidelines to report a security vulnerability. Please do NOT create a public GitHub issue.