We take security vulnerability seriously. Only the vulnerabilities valid in the latest published build are considered. Any resolved vulnerabilities in the latest version are considered resolved and anymore new duplicates are regarded as invalid.
To report a vulnerability, go to issues and report a bug. If we see the bug report as a security vulnerability, we will categorize it so that it is in high priority.