Security fixes are made for the latest released version.

Please don't report security issues in public GitHub issues. Use GitHub's private vulnerability reporting instead: open the repository's Security tab and choose Report a vulnerability.

Include a description, the affected version and steps to reproduce. You'll get an acknowledgement within a few working days, and a fix or mitigation plan once the issue is confirmed.