Report vulnerabilities privately through GitHub's security advisories for this repository (Security tab, "Report a vulnerability"), or by mail to max.azatian@gmail.com. Do not open a public issue for anything exploitable.

You can expect an acknowledgement within a week. Supported version: the latest release only.