Only the latest release receives fixes.

Please don't open a public issue. Report it privately with Report a vulnerability on this repository's Security and quality tab (GitHub's guide). You'll get a reply within a week. Once a fix is released, the advisory is published with credit to you, unless you'd rather stay anonymous.