As SMWMTL is not a critical application and never touches at critical Windows features, security risk will (normally) always be minimal. However, if you found something that can compromize the security of your system (if it not touches to .NET Framework itself), you can send an Issue report with the "[URG-SECURITY]" tag in the begin of the issue title.

Remember that if the problem you wants to report is from .NET Framework itself, I probably can't fix it except by changing the .NET Framework version used, which will leads to end support for Windows Vista and 8 (which don't support .NET Framework versions above 4.6) unplannedly.

^{See Supported Operating Systems for more details about supported operating systems.}

When a new version is released, the previous one remains supported for 13 months. The end of support date for a version is always at the Patch Tuesday of the 13th month.

However, there's an exception for the last release of a codebase (like 1.20 and 2.07) which all have an end of support date 4 years after the release date.

See the first part of this document for how create an Issue ticket.

If a Security-related issue is opened since more than 24h and I still not responded to it, you can ping me on Twitter (@Kiki79250CoC), and normally I will see it (except if my Internet connection is down).