Only the latest released minor version is supported for security updates.

Open a private security advisory in GitHub or contact maintainers directly. Do not disclose vulnerabilities publicly until a patch is available.