Only the latest release receives security fixes.
Please do not open a public issue. Report it privately through GitHub's private vulnerability reporting.
Include the plugin version, a description of the issue, and, where relevant, the schema/query that produces the problematic generated code (for example, SQL injection or unsafe parameter handling in generated output).