Since the underlying data is updated regularly, only the most recent release of hstspreload is supported for vulnerability fixes.
You can submit vulnernability reports to GitHub Security Advisories. Someone on the team will try to respond within 48 hours.