Security fixes are applied to the latest release and the main branch.
Please report security issues via GitHub Security Advisories for this repository. If that is not possible, open a GitHub Issue and label it security so it can be triaged quickly.