Only the latest release receives security fixes.
Do not open a public issue for security vulnerabilities.
Send a report to tky0065@gmail.com with:
- A description of the vulnerability
- Steps to reproduce
- Potential impact
You will receive a response within 72 hours. If the issue is confirmed, a patch will be released as soon as possible and you will be credited in the release notes (unless you prefer to remain anonymous).