Security fixes are made for the latest SimplePie release. Please check that the problem still exists in the latest release before reporting it.
Please don't open a public issue or pull request for a security problem.
Report it privately through GitHub's private vulnerability reporting on this repository. Include the affected version, a description of the problem and, if you can, a minimal feed or code sample that reproduces it.