APSW depends on the underlying SQLite library and C Python implementation. It does not have any additional permissions above those environments.
All versions where the SQLite library and C Python are supported.
You can report vulnerabilities privately to rogerb@rogerbinns.com, or publicly via the issue tracker.