Only the latest main branch receives security fixes.

Please do not open a public issue for security reports. Use GitHub's private vulnerability reporting instead:

Security → Report a vulnerability on this repository.

You can expect a first response within a few days. If the report is accepted, fixes are developed privately and released as soon as possible.