Security fixes are applied to the latest released version.

Please use GitHub's private vulnerability reporting feature for this repository. Do not include advertising IDs, customer information, or production attribution data in a public issue.

You should receive an acknowledgement within seven days. A fix and disclosure timeline will depend on the scope of the issue.