Security fixes are applied to the latest released version.
Please use GitHub's private vulnerability reporting for this repository. If that option is unavailable, open a minimal issue asking for a private contact channel; do not include exploit details or private browsing data in a public issue.
Useful reports include the affected version, Chrome version, reproduction steps, impact, and whether the issue requires a specific website or image type.