Please don't open a public issue for a security problem. Email contact@dim0.net instead, with what you found, how to reproduce it, and what an attacker could do with it.

You'll get a reply within a few days. Once a fix ships, you're welcome to be credited in the release notes.

Only the latest release gets security fixes. minmux tells you when a newer release is out; update before reporting.