PLEASE DON'T DISCLOSE SECURITY-RELATED ISSUES PUBLICLY, SEE BELOW.
Only the latest major version receives security fixes.
If you discover a security vulnerability, please send an email to Dries Vints at dries@vints.be. All security vulnerabilities will be promptly addressed.