Please don't report security issues in public issues. Report them privately through GitHub's private vulnerability reporting instead.

Fixes go into the latest release only.