Only the latest release receives security fixes.
Please email security@steady.space, or report privately via GitHub's private vulnerability reporting, with a description and steps to reproduce. Do not open a public issue or pull request for security vulnerabilities.
We will acknowledge reports within a few days and coordinate disclosure with the reporter.