All released versions are supported

Report the vulnerability privately through the project's security reporting mechanism.

When reporting a vulnerability, please include:

A description of the vulnerability and its potential impact. Steps to reproduce the issue. A minimal proof of concept, if available. The affected version(s). Any suggested mitigation or fix, if available. We will acknowledge your report as soon as possible and will provide an update on its status after we have had an opportunity to investigate it. If the vulnerability is confirmed, we will work to release a fix and communicate the affected versions and recommended upgrade path.

Thank you for helping keep the project and its users secure.