Please do not open a public issue for security problems.

Instead, use GitHub's private vulnerability reporting: open the Security tab of the affected repository and click Report a vulnerability. Reports go directly to the maintainer and stay private while they are investigated.

Only the latest release of each tool receives security fixes.