Only the latest released version receives security fixes.
Please report vulnerabilities privately via GitHub Security Advisories.
Include:
- A description of the issue and its impact.
- Steps to reproduce, or a proof of concept.
- Affected versions.
You can expect an initial response within 7 days. Please do not disclose the issue publicly until a fix has been released.