Please report vulnerabilities privately through GitHub: open the Security tab and choose Report a vulnerability. Don't open a public issue.

I'll acknowledge the report as soon as I can and keep you updated on the fix.

Fixes land on the latest main and the most recent release.