Report a vulnerability privately through GitHub: open the Security tab of the affected repository and choose Report a vulnerability. Please do not open a public issue.
Only the latest release of each module is supported; a fix ships as a new release.