This project has not yet reached a 1.0 release. No versions are supported for security patches until the first tagged release.
Please report suspected vulnerabilities privately via GitHub's private vulnerability reporting feature rather than opening a public issue.