Only the latest release (and main) receives security fixes.

Please do not open a public issue for security problems.

Report privately via GitHub private vulnerability reporting. ("Report a vulnerability"). You should get an acknowledgement within a few days.

Please include a description of the issue, steps to reproduce, and the affected version or commit.