Only the latest code on the default branch is supported with security fixes.
Please report security issues privately by opening a GitHub Security Advisory.
If you cannot use Security Advisories, open a GitHub issue with minimal details and state that you can provide more information privately.
Do not disclose vulnerabilities publicly until a fix is available.