Please report vulnerabilities privately through GitHub security advisories, not in public issues. You'll get a reply as soon as possible, and credit once a fix is released.

Only the latest release receives fixes.