Security fixes are made in the latest release. Please upgrade to it before reporting.

Please do not report security issues in public issues or pull requests. Use private vulnerability reporting and include the affected version, platform, and steps or a file that reproduces the problem.

We will acknowledge the report, keep you updated on the fix, and credit you in the advisory unless you prefer otherwise.