Security fixes are made to the latest release only.

Please don't report security problems in a public issue. Use GitHub's private vulnerability reporting (the Security tab → Report a vulnerability), or email the maintainers at

We aim to acknowledge reports within two weeks, and will tell you how we plan to fix the problem.