Only the latest release is supported. A fix is released as a new tag; install it to pick the fix up.

Please report it privately, not in a public issue. On the repository's Security tab, choose Report a vulnerability, or open the form directly at https://github.com/gmrdad82/p99/security/advisories/new. Say what you found, the version or commit, and how to reproduce it: the command line and, the request and the response P99 gave help most.

The report stays private between you and the maintainer until a fix is released. You will hear back on the advisory, and the fix and its release are credited to you unless you would rather they were not.