If you think you've identified a security issue, please send an email with all relevant details to security at thorsphere.com. Please do not report the issue publicly.
If the security report moves to a fix and a new release, it will be referred to in the release notes.