Please report a security problem privately: on the repository's Security tab, choose Report a vulnerability. Do not open a public issue for it.

Fixes go into the latest version only.