To report a vulnerability, simply open an Issue with the Security label. We'll try to patch it quickly. In order to take as little risk as possible, we recommend always going to the latest stable (production) version.