Please do not publish suspected vulnerabilities in a public issue.
Use GitHub private vulnerability reporting and include the affected version, reproduction steps, and expected impact. Reports that concern the demo only should still identify whether the reusable LiquidUI package is affected.
The latest tagged release receives security fixes. Older releases may require upgrading.