Security fixes target the latest release on main.

Email [email protected] or use GitHub private vulnerability reporting. Do not open public issues for exploitable vulnerabilities.