Please never report possible security issues on public GitHub tickets as those are public. Instead please preferredly report responsibly via the "Private vulnerability reporting" feature on GitHub only. Alternatively contact us via mail on our site only
Reports should preferredly be made based on the current support/development build (master) on GitHub.