Because of limited resources and general compatibility between versions only the latest release of Dompdf is actively supported.
In order to give the community time to respond and upgrade we strongly urge you report all security issues privately. Please email us at security@dompdf.org with details and we will respond ASAP.