Please do not disclose a suspected security issue in a public GitHub issue.
Use GitHub's private security advisory feature for this repository and include a minimal reproduction, affected versions, and the expected impact. You should receive an initial response within seven days.
Only the latest published version receives security fixes.