Those versions are so far removed from receiving any security patches I'd probably want management to sign off that they heard me state this and they take full responsibility if shit hits the fan.

Also, are you at least a little concerned about your career using a tech stack that old?