Security updates are included in new releases only. They are not backported to previous versions.

Use Tidelift to report a security issue affecting this package: https://tidelift.com/security