Please see Releases.
Please report vulnerabilities via GitHub Issues (private disclosure preferred — use GitHub's security advisory feature).
Please do not file a public ticket mentioning the vulnerability, as doing so could increase the likelihood of the vulnerability being used before a fix has been created, released and installed on the network.