Please don't open a public issue for a security problem. Report it privately through GitHub: Report a vulnerability.
Say what you found, how to reproduce it and which version you used. English or Spanish are both fine.
This project has a single maintainer, so replies are best effort. I aim to answer within 14 days.
Anything that weakens the encryption, or that leaks a message, a password or a key.
Only the latest release gets security fixes.