Please do not open a public issue for a security problem.

Report it privately through GitHub Security Advisories, which lets us discuss and fix the issue before it is disclosed.

You can expect an acknowledgement within a few days. If a fix is warranted, we will prepare it privately, publish a patched release, and credit you in the advisory unless you would rather remain anonymous.

The latest minor release receives security fixes. Older lines are not patched.