Report vulnerabilities privately through GitHub's vulnerability reporting, not in public issues. Include the affected package and version, and steps to reproduce.

Fixes are released for the latest version of each package.