Please report security issues privately via email or a confidential issue. Do not create public issues for vulnerabilities until a fix is available.

Supported versions: the latest minor/patch.