Security fixes are released for the latest published version.
Please do not open a public issue. Report the vulnerability privately through GitHub security advisories. The maintainers will acknowledge it as soon as possible and keep you informed until it is resolved.