As this project only exists to keep a deprecated package alive and working, security updates are applied in new releases.
It is your responsibility to update on a regular basis.

Use this section to tell people how to report a vulnerability.

All security vulnerabilities should be reported in the Issue Tracker