Security fixes are applied to the latest released major version.

Please email security@boonestudios.org with a description of the issue and steps to reproduce. Do not open a public GitHub issue for security reports.

We aim to acknowledge reports within 3 business days.