ImagoKit is pre-1.0. Security fixes go into the latest released version only.
Please do not open a public issue for a security problem. Use GitHub's private vulnerability reporting: open the repository's Security tab and choose Report a vulnerability. Include the affected version, a description, and a minimal way to reproduce it.
We will acknowledge your report as soon as we can and keep you informed about the fix.