Security fixes target the latest release.

Please use GitHub's private vulnerability reporting feature on this repository. Do not open a public issue for an unpatched vulnerability. Include reproduction steps, affected files, and the expected impact. You should receive an initial response within seven days.