Only the latest release gets security fixes. The app updates itself, so please check you're on the newest version before reporting.

Please don't open a public issue. Use GitHub's private reporting instead: go to the Security tab and click Report a vulnerability.

Include what you found, how to reproduce it, and which version and operating system you use. You'll get a reply within a week.