Only the latest release receives security fixes.

Please do not open a public issue for security problems.

Report vulnerabilities privately through GitHub: Report a vulnerability.

You should receive a response within 7 days. If the issue is confirmed, a fix will be released and credited in the advisory unless you prefer otherwise.