Security fixes target the latest release on main.

Email acartoon766@gmail.com or use GitHub private vulnerability reporting. Do not open public issues for exploitable vulnerabilities.