Please don't report security issues in public issues.

Report them privately through the repository's Security tab using Report a vulnerability. You'll get a reply within 7 days.

Only the latest release is supported with security fixes.