Security fixes are released for the latest major version.
Please use GitHub's private vulnerability reporting for this repository. Do not open a public issue for a suspected vulnerability.
Include the affected version or commit, reproduction steps, impact, and any suggested mitigation. Reports will be acknowledged as soon as practical.