Currently no versions of this project will receive security patches.
You should still report vulnerabilities, we will implement a fix, but the fix will not be back-ported to older versions.

Open a new issue describing the problem.

For now, we treat security vulnerabilities like regular issues.
All issues are triaged and prioritised based on severity.
Once the issue is in progress (i.e. a branch has been created), if you would like an update on progress then please ask using the same ticket.
We endeavour to be transparent so if we decide to close the issue then we will state our justification; if you would like to dispute our decision, please open a new ticket as we may not see new comments on closed issues.