The latest commit on the default branch is the only supported version.
To report a security vulnerability, please open an issue on GitHub with the prefix [SECURITY]. I will acknowledge within 48 hours.
Please do not disclose the vulnerability publicly until I have had a chance to address it.