Versions prior to v0.5.0 should not be used, since they are outdated and unmaintained.

To report a vulnerability, use the Security Advisories service. You can except a response in the following 2 days, and a fix in the following month.