Only the latest release receives security fixes. Please keep your installation up to date.
Report privately via GitHub Security Advisories (Security tab -> "Report a vulnerability"). Do not open a public issue.
Include a description, the affected version and reproduction steps. Reports are acknowledged within a few days.