Please don't open a public issue for a security problem. Report it privately through GitHub: Report a vulnerability.
Say what you found, how to reproduce it and which version you used. English or Spanish are both fine.
This project has a single maintainer, so replies are best effort. I aim to answer within 14 days.
Anything where a task file or a setting runs something the user did not ask for, or with more privileges than the user asked for.
Only the latest release gets security fixes.