Summary

Now the library still by default uses freetype 2.6.1

Freetype 2.6.1 is a very old version. Today latest freetype release is 2.11.0. And some freetype release like 2.10.4 has important vulnerability fix. See https://www.freetype.org/index.html#news

Proposed fix

Support newer versions of freetype, and by default use its latest version that is 2.11.0