Please do not open a public issue for a security problem. Report it privately through GitHub: open the Security tab of the affected repository and choose Report a vulnerability. The maintainers will acknowledge the report, assess it and coordinate a fix and its disclosure with you.

Only the latest state of the main branch of each repository receives security fixes.