Report vulnerabilities through GitHub's private vulnerability reporting: open the repository's Security tab and choose "Report a vulnerability". Do not open a public issue for security reports.

Only the latest release receives fixes.