Please email the maintainers with details of the issue and steps to reproduce.
We aim to respond within a reasonable timeframe and coordinate a responsible disclosure.
We support the latest released version. Security fixes will be backported when feasible.