Supported: the latest 1.x release.

Please report vulnerabilities privately through GitHub's "Report a vulnerability" button on this repository (Security tab). Do not open a public issue. You will get a reply within 7 days. There is no bug bounty.