Please do not report security problems in public issues.
Report them privately through GitHub instead: open the repository's Security tab and choose Report a vulnerability. You will get an answer as soon as possible.
Only the latest version on the main branch receives fixes while the project is in early development.