Only the latest release of Plugd gets fixes.
If you find a security problem, please don't open a public issue. Use GitHub's private reporting instead: go to the Security tab and click Report a vulnerability. You can also email plugd@almoayyad.dev.
I'll reply within a week and tell you when a fix is out.
Plugd only reads from your car. It downloads Wine from GitHub and FORScan from forscan.org, and sends no data anywhere else. See the privacy policy for details.