Please do not open a public issue for a security problem. Use GitHub's Report a vulnerability (Security tab → Advisories) on this repository instead. You will get a reply within 7 days.
Supported versions: the latest release on the version-15 and version-16 branches.