Currently the only supported version is the latest patch release of the 2.4.x stable branch.
Apache 2.4 Security Vulnerabilities
For information on how to report a new security problem please see here