Please do not open a public issue for a security problem. Report it privately through GitHub: open the Security tab of this repository and choose Report a vulnerability. The maintainers will acknowledge the report, assess it and coordinate a fix and its disclosure with you.
Only the latest state of the main branch receives security fixes.