Please don't open a public issue. Use Report a vulnerability instead, so the problem can be fixed before it is public.
Include what you did, what happened, and the version: the image tag you run, or the output of docker exec thirtyfile thirtyfile --version.
Fixes are released for the newest version only. Upgrading is described in Upgrade and backup.