Only the latest release gets fixes.

Please do not open a public issue. Use private vulnerability reporting on the Security tab of this repository and describe what you found, how to reproduce it and what it could affect. You will get an answer as soon as possible; this is a one-person project, so please be patient.

Areas where a report matters most: the HTTP server (yoshida-server), reading design and card data files, and loading images or fonts from disk and the web.