Please report security problems privately through GitHub's private vulnerability reporting rather than in a public issue. You can also email g.montana@warwick.ac.uk.

Include the affected version or commit, the steps to reproduce the problem and its possible impact. You will receive an acknowledgement, and the fix will be credited to you unless you prefer otherwise.

Security fixes are made to the latest release.