Only the latest minor release of logixia gets security fixes.
Please do not open a public issue for security problems.
Report it privately through GitHub's private vulnerability reporting. Include the version, a minimal reproduction, and the impact you expect.
You should get a reply within 3 working days. Once a fix is released, the advisory is published with credit to the reporter unless you ask otherwise.