Only the latest 3.x release receives security fixes.

Report privately through GitHub Security Advisories on this repository. Please do not open a public issue for a security report.

Expect an acknowledgment within a few days.